npm Package Vulnerabilities

All 2,703 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 5,763 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1,901.npm-programmatic1 CVE
  2. 1,902.npm-script-demo1 CVE
  3. 1,903.npm-test-sqlite3-trunk1 CVE
  4. 1,904.npm-user-validate1 CVE
  5. 1,905.npos-tesseract1 CVE
  6. 1,906.nteract1 CVE
  7. 1,907.ntesseract1 CVE
  8. 1,908.ntfserver1 CVE
  9. 1,909.nth-check1 CVE
  10. 1,910.nuclide1 CVE
  11. 1,911.@nuxt/devalue1 CVE
  12. 1,912.@nuxt/icon1 CVE
  13. 1,913.@nuxtlabs/github-module1 CVE
  14. 1,914.@nuxt/vite-builder1 CVE
  15. 1,915.nw1 CVE
  16. 1,916.nw-with-arm1 CVE
  17. 1,917.nx1 CVE
  18. 1,918.@nx/azure-cache1 CVE
  19. 1,919.@nx/devkit1 CVE
  20. 1,920.@nx/enterprise-cloud1 CVE
  21. 1,921.@nx/eslint1 CVE
  22. 1,922.@nx/js1 CVE
  23. 1,923.@nx/key1 CVE
  24. 1,924.@nx/node1 CVE
  25. 1,925.@nx/workspace1 CVE
  26. 1,926.oauth2orize-fprm1 CVE
  27. 1,927.object-collider1 CVE
  28. 1,928.object-extend1 CVE
  29. 1,929.object-hierarchy-access1 CVE
  30. 1,930.objection1 CVE
  31. 1,931.object-path-set1 CVE
  32. 1,932.obsidian1 CVE
  33. 1,933.obsidian-dataview1 CVE
  34. 1,934.oceanic.js1 CVE
  35. 1,935.octokit1 CVE
  36. 1,936.@octokit/app1 CVE
  37. 1,937.@octokit/endpoint1 CVE
  38. 1,938.@octokit/plugin-paginate-rest1 CVE
  39. 1,939.@octokit/request1 CVE
  40. 1,940.@octokit/request-error1 CVE
  41. 1,941.@octokit/webhooks1 CVE
  42. 1,942.oils1 CVE
  43. 1,943.@okta/oidc-middleware1 CVE
  44. 1,944.@oneuptime/common-server1 CVE
  45. 1,945.@oneuptime/model1 CVE
  46. 1,946.on-headers1 CVE
  47. 1,947.onion-oled-js1 CVE
  48. 1,948.op-browser1 CVE
  49. 1,949.openclaude1 CVE
  50. 1,950.Openclaw1 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →