npm Package Vulnerabilities

All 3,018 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 7,323 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 151.total.js7 CVEs
  2. 152.unleash-server7 CVEs
  3. 153.vega7 CVEs
  4. 154.webpack-dev-server7 CVEs
  5. 155.aaptjs6 CVEs
  6. 156.@backstage/backend-defaults6 CVEs
  7. 157.basic-ftp6 CVEs
  8. 158.@budibase/backend-core6 CVEs
  9. 159.@frangoteam/fuxa6 CVEs
  10. 160.@grpc/grpc-js6 CVEs
  11. 161.hapi6 CVEs
  12. 162.@intlify/vue-i18n-core6 CVEs
  13. 163.joi6 CVEs
  14. 164.jsonata6 CVEs
  15. 165.katex6 CVEs
  16. 166.mcp-server-kubernetes6 CVEs
  17. 167.minimatch6 CVEs
  18. 168.music-metadata6 CVEs
  19. 169.openpgp6 CVEs
  20. 170.parse-url6 CVEs
  21. 171.petite-vue-i18n6 CVEs
  22. 172.prismjs6 CVEs
  23. 173.rsshub6 CVEs
  24. 174.serialize-javascript6 CVEs
  25. 175.@steipete/summarize6 CVEs
  26. 176.swagger-typescript-api6 CVEs
  27. 177.swagger-ui6 CVEs
  28. 178.toml6 CVEs
  29. 179.ua-parser-js6 CVEs
  30. 180.vue-i18n6 CVEs
  31. 181.ws6 CVEs
  32. 182.auth0-js5 CVEs
  33. 183.@backstage/plugin-catalog-backend5 CVEs
  34. 184.bootstrap-sass5 CVEs
  35. 185.@builder.io/qwik5 CVEs
  36. 186.ckeditor55 CVEs
  37. 187.convict5 CVEs
  38. 188.decompress5 CVEs
  39. 189.dojo5 CVEs
  40. 190.ejs5 CVEs
  41. 191.elysia5 CVEs
  42. 192.ep_etherpad-lite5 CVEs
  43. 193.express5 CVEs
  44. 194.froala-editor5 CVEs
  45. 195.generator-jhipster5 CVEs
  46. 196.@highcharts/grid-pro5 CVEs
  47. 197.http-proxy-middleware5 CVEs
  48. 198.@intlify/core5 CVEs
  49. 199.@intlify/core-base5 CVEs
  50. 200.keystone5 CVEs

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →