npm Package Vulnerabilities

All 3,018 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 7,323 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 2,201.@openclaw/matrix1 CVE
  2. 2,202.@openclaw/msteams1 CVE
  3. 2,203.@openclaw/nextcloud-talk1 CVE
  4. 2,204.opencv1 CVE
  5. 2,205.opencv.js1 CVE
  6. 2,206.open-device1 CVE
  7. 2,207.openframe-ascii-image1 CVE
  8. 2,208.openframe-glslviewer1 CVE
  9. 2,209.openframe-image1 CVE
  10. 2,210.open-graph1 CVE
  11. 2,211.@openhop/server1 CVE
  12. 2,212.@openlist-frontend/openlist-frontend1 CVE
  13. 2,213.openssl1 CVE
  14. 2,214.openssl.js1 CVE
  15. 2,215.@opentelemetry/auto-instrumentations-node1 CVE
  16. 2,216.@opentelemetry/core1 CVE
  17. 2,217.@opentelemetry/exporter-prometheus1 CVE
  18. 2,218.@opentelemetry/instrumentation-cassandra-driver1 CVE
  19. 2,219.@opentelemetry/instrumentation-knex1 CVE
  20. 2,220.@opentelemetry/instrumentation-mongoose1 CVE
  21. 2,221.@opentelemetry/instrumentation-mysql1 CVE
  22. 2,222.@opentelemetry/instrumentation-mysql21 CVE
  23. 2,223.@opentelemetry/instrumentation-oracledb1 CVE
  24. 2,224.@opentelemetry/instrumentation-pg1 CVE
  25. 2,225.@opentelemetry/instrumentation-tedious1 CVE
  26. 2,226.@opentelemetry/propagator-jaeger1 CVE
  27. 2,227.@opentelemetry/sdk-node1 CVE
  28. 2,228.open-websearch1 CVE
  29. 2,229.@openzeppelin/confidential-contracts1 CVE
  30. 2,230.openzeppelin-eth1 CVE
  31. 2,231.openzeppelin-solidity1 CVE
  32. 2,232.@openzeppelin/wizard-cairo1 CVE
  33. 2,233.@openzeppelin/wizard-stellar1 CVE
  34. 2,234.@openzeppelin/wizard-stylus1 CVE
  35. 2,235.operadriver1 CVE
  36. 2,236.orejime1 CVE
  37. 2,237.org.webjars.npm:json-pointer1 CVE
  38. 2,238.@orpc/client1 CVE
  39. 2,239.@orpc/openapi1 CVE
  40. 2,240.@orpc/server1 CVE
  41. 2,241.@orpc/zod1 CVE
  42. 2,242.@orval/mcp1 CVE
  43. 2,243.@orval/mock1 CVE
  44. 2,244.osm-static-maps1 CVE
  45. 2,245.otp-generator1 CVE
  46. 2,246.@outerbase/studio1 CVE
  47. 2,247.p41 CVE
  48. 2,248.pacote1 CVE
  49. 2,249.pac-resolver1 CVE
  50. 2,250.paella-core1 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →