npm Package Vulnerabilities

All 2,706 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 5,772 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 2,251.selenium-wrapper1 CVE
  2. 2,252.semver-tags1 CVE
  3. 2,253.sencisho1 CVE
  4. 2,254.seneca1 CVE
  5. 2,255.@sentry/aws-serverless1 CVE
  6. 2,256.@sentry/bun1 CVE
  7. 2,257.@sentry/google-cloud-serverless1 CVE
  8. 2,258.@sentry/nestjs1 CVE
  9. 2,259.@sentry/node1 CVE
  10. 2,260.@sentry/node-core1 CVE
  11. 2,261.@sentry/nuxt1 CVE
  12. 2,262.@sentry/remix1 CVE
  13. 2,263.@sentry/solidstart1 CVE
  14. 2,264.@sentry/sveltekit1 CVE
  15. 2,265.@sequa-ai/sequa-mcp1 CVE
  16. 2,266.sequelize-typescript1 CVE
  17. 2,267.serc.js1 CVE
  18. 2,268.@serenity-is/corelib1 CVE
  19. 2,269.serial-number1 CVE
  20. 2,270.serve461 CVE
  21. 2,271.serve-here.js1 CVE
  22. 2,272.serve-index1 CVE
  23. 2,273.serverabc1 CVE
  24. 2,274.serverhuwenhui1 CVE
  25. 2,275.serverless1 CVE
  26. 2,276.serverless-offline1 CVE
  27. 2,277.serverliujiayi11 CVE
  28. 2,278.serverlyr1 CVE
  29. 2,279.serverwg1 CVE
  30. 2,280.serverwzl1 CVE
  31. 2,281.serverxxx1 CVE
  32. 2,282.serveryaozeyan1 CVE
  33. 2,283.serveryztyzt1 CVE
  34. 2,284.serverzyy1 CVE
  35. 2,285.servey1 CVE
  36. 2,286.servify-express1 CVE
  37. 2,287.servst1 CVE
  38. 2,288.set-deep-prop1 CVE
  39. 2,289.set-getter1 CVE
  40. 2,290.set-object-value1 CVE
  41. 2,291.set-or-get1 CVE
  42. 2,292.sexstatic1 CVE
  43. 2,293.sey1 CVE
  44. 2,294.sfml1 CVE
  45. 2,295.sgqserve1 CVE
  46. 2,296.shadowsock1 CVE
  47. 2,297.sha.js1 CVE
  48. 2,298.shamefile1 CVE
  49. 2,299.sharp1 CVE
  50. 2,300.shave1 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →