npm Package Vulnerabilities

All 3,018 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 7,323 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 2,301.peiserver1 CVE
  2. 2,302.pekeupload1 CVE
  3. 2,303.@pendo324/get-process-by-name1 CVE
  4. 2,304.pennyworth1 CVE
  5. 2,305.@penpot/mcp1 CVE
  6. 2,306.pepr1 CVE
  7. 2,307.pg1 CVE
  8. 2,308.pg-native1 CVE
  9. 2,309.pg-promise1 CVE
  10. 2,310.@phala/dcap-qvl1 CVE
  11. 2,311.@phala/dcap-qvl-node1 CVE
  12. 2,312.@phala/dcap-qvl-web1 CVE
  13. 2,313.phantom-html-to-pdf1 CVE
  14. 2,314.phantomjs1 CVE
  15. 2,315.phantomjs-cheniu1 CVE
  16. 2,316.phantomjs-seo1 CVE
  17. 2,317.phoenix1 CVE
  18. 2,318.phoenix_html1 CVE
  19. 2,319.phpjs1 CVE
  20. 2,320.@phun-ky/defaults-deep1 CVE
  21. 2,321.picard1 CVE
  22. 2,322.picotts1 CVE
  23. 2,323.pivottable1 CVE
  24. 2,324.pixl-class1 CVE
  25. 2,325.pk-app-wonderbox1 CVE
  26. 2,326.pkg1 CVE
  27. 2,327.@pkgr/core1 CVE
  28. 2,328.@platejs/core1 CVE
  29. 2,329.@platejs/docx-io1 CVE
  30. 2,330.@platejs/media1 CVE
  31. 2,331.playwright1 CVE
  32. 2,332.@playwright/mcp1 CVE
  33. 2,333.plist1 CVE
  34. 2,334.plupload1 CVE
  35. 2,335.pm21 CVE
  36. 2,336.pm2-kafka1 CVE
  37. 2,337.pngcrush-installer1 CVE
  38. 2,338.png-img1 CVE
  39. 2,339.@pnpm/cafs1 CVE
  40. 2,340.@pnpm/exe1 CVE
  41. 2,341.@pnpm/linux-arm641 CVE
  42. 2,342.@pnpm/linuxstatic-arm641 CVE
  43. 2,343.@pnpm/linux-x641 CVE
  44. 2,344.@pnpm/macos-arm641 CVE
  45. 2,345.@pnpm/macos-x641 CVE
  46. 2,346.@pnpm/win-x641 CVE
  47. 2,347.poco1 CVE
  48. 2,348.@podium/layout1 CVE
  49. 2,349.@podium/proxy1 CVE
  50. 2,350.pomelo1 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →