npm Package Vulnerabilities

All 3,018 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 7,323 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 2,351.pomelo-monitor1 CVE
  2. 2,352.pooledwebsocket1 CVE
  3. 2,353.@portkey-ai/gateway1 CVE
  4. 2,354.portkiller1 CVE
  5. 2,355.port-killer1 CVE
  6. 2,356.portprocesses1 CVE
  7. 2,357.posix1 CVE
  8. 2,358.posthog-js1 CVE
  9. 2,359.@posthog/plugin-server1 CVE
  10. 2,360.post-loader1 CVE
  11. 2,361.pouchdb1 CVE
  12. 2,362.@powersync/service-core1 CVE
  13. 2,363.@powersync/service-sync-rules1 CVE
  14. 2,364.preact1 CVE
  15. 2,365.prebid.js1 CVE
  16. 2,366.prebid-universal-creative1 CVE
  17. 2,367.prebuild-lwip1 CVE
  18. 2,368.predefine1 CVE
  19. 2,369.primefaces1 CVE
  20. 2,370.prince1 CVE
  21. 2,371.printer1 CVE
  22. 2,372.printf1 CVE
  23. 2,373.@prisma/sdk1 CVE
  24. 2,374.probe-image-size1 CVE
  25. 2,375.probot1 CVE
  26. 2,376.proctree1 CVE
  27. 2,377.product-monitor1 CVE
  28. 2,378.@progfay/scrapbox-parser1 CVE
  29. 2,379.progressbar.js1 CVE
  30. 2,380.projen1 CVE
  31. 2,381.promisehelpers1 CVE
  32. 2,382.promise-probe1 CVE
  33. 2,383.properties-reader1 CVE
  34. 2,384.property-expr1 CVE
  35. 2,385.prosemirror-view1 CVE
  36. 2,386.Proto1 CVE
  37. 2,387.@protobufjs/utf81 CVE
  38. 2,388.protocol-buffers-schema1 CVE
  39. 2,389.proxy1 CVE
  40. 2,390.proxy-addr1 CVE
  41. 2,391.proxy.js1 CVE
  42. 2,392.ps1 CVE
  43. 2,393.ps-kill1 CVE
  44. 2,394.psnode1 CVE
  45. 2,395.ps-visitor1 CVE
  46. 2,396.pubnub1 CVE
  47. 2,397.@puchunjie/doc-tools-mcp1 CVE
  48. 2,398.pullit1 CVE
  49. 2,399.pulverizr1 CVE
  50. 2,400.puppeteer1 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →