npm Package Vulnerabilities

All 2,703 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 5,753 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1,601.@langchain/langgraph-checkpoint-redis1 CVE
  2. 1,602.larvitbase-api1 CVE
  3. 1,603.launchpad1 CVE
  4. 1,604.lazysizes1 CVE
  5. 1,605.ldapauth1 CVE
  6. 1,606.ldapauth-fork1 CVE
  7. 1,607.@leanprover/unicode-input-component1 CVE
  8. 1,608.lemonldap-ng-handler1 CVE
  9. 1,609.lessindex1 CVE
  10. 1,610.less-openui51 CVE
  11. 1,611.lettersanitizer1 CVE
  12. 1,612.libnmap1 CVE
  13. 1,613.libnotify1 CVE
  14. 1,614.libp2p1 CVE
  15. 1,615.@libp2p/kad-dht1 CVE
  16. 1,616.libpq1 CVE
  17. 1,617.libsbml1 CVE
  18. 1,618.libsbmlsim1 CVE
  19. 1,619.libxl1 CVE
  20. 1,620.libyaml1 CVE
  21. 1,621.liferay-ckeditor1 CVE
  22. 1,622.lifion-verify-deps1 CVE
  23. 1,623.lightning-flow-scanner1 CVE
  24. 1,624.lightning-server1 CVE
  25. 1,625.lilconfig1 CVE
  26. 1,626.limbus-buildgen1 CVE
  27. 1,627.limdu1 CVE
  28. 1,628.line-desktop-mcp1 CVE
  29. 1,629.linkifyjs1 CVE
  30. 1,630.linux-cmdline1 CVE
  31. 1,631.@lionello/secp256k1-js1 CVE
  32. 1,632.list-n-stream1 CVE
  33. 1,633.lite-dev-server1 CVE
  34. 1,634.lite-server1 CVE
  35. 1,635.litespeed.js1 CVE
  36. 1,636.lite-web-server1 CVE
  37. 1,637.liuyaserver1 CVE
  38. 1,638.lix1 CVE
  39. 1,639.liyujing1 CVE
  40. 1,640.locize1 CVE
  41. 1,641.lockfile-lint-api1 CVE
  42. 1,642.lodahs1 CVE
  43. 1,643.lodash.defaultsdeep1 CVE
  44. 1,644.lodash.pick1 CVE
  45. 1,645.lodash.set1 CVE
  46. 1,646.lodash.setwith1 CVE
  47. 1,647.lodash.trim1 CVE
  48. 1,648.lodash.trimend1 CVE
  49. 1,649.lodash.update1 CVE
  50. 1,650.lodash.updatewith1 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →