npm Package Vulnerabilities

All 3,018 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 7,323 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 2,551.@sentry/aws-serverless1 CVE
  2. 2,552.@sentry/bun1 CVE
  3. 2,553.@sentry/google-cloud-serverless1 CVE
  4. 2,554.@sentry/nestjs1 CVE
  5. 2,555.@sentry/node1 CVE
  6. 2,556.@sentry/node-core1 CVE
  7. 2,557.@sentry/nuxt1 CVE
  8. 2,558.@sentry/remix1 CVE
  9. 2,559.@sentry/solidstart1 CVE
  10. 2,560.@sentry/sveltekit1 CVE
  11. 2,561.@sequa-ai/sequa-mcp1 CVE
  12. 2,562.sequelize-typescript1 CVE
  13. 2,563.serc.js1 CVE
  14. 2,564.@serenity-is/corelib1 CVE
  15. 2,565.serial-number1 CVE
  16. 2,566.serve461 CVE
  17. 2,567.serve-here.js1 CVE
  18. 2,568.serve-index1 CVE
  19. 2,569.serverabc1 CVE
  20. 2,570.serverhuwenhui1 CVE
  21. 2,571.serverless1 CVE
  22. 2,572.serverless-offline1 CVE
  23. 2,573.serverliujiayi11 CVE
  24. 2,574.serverlyr1 CVE
  25. 2,575.serverwg1 CVE
  26. 2,576.serverwzl1 CVE
  27. 2,577.serverxxx1 CVE
  28. 2,578.serveryaozeyan1 CVE
  29. 2,579.serveryztyzt1 CVE
  30. 2,580.serverzyy1 CVE
  31. 2,581.servey1 CVE
  32. 2,582.servify-express1 CVE
  33. 2,583.servst1 CVE
  34. 2,584.set-deep-prop1 CVE
  35. 2,585.set-getter1 CVE
  36. 2,586.set-object-value1 CVE
  37. 2,587.set-or-get1 CVE
  38. 2,588.sexstatic1 CVE
  39. 2,589.sey1 CVE
  40. 2,590.sfml1 CVE
  41. 2,591.sgqserve1 CVE
  42. 2,592.shadowsock1 CVE
  43. 2,593.sha.js1 CVE
  44. 2,594.shamefile1 CVE
  45. 2,595.shave1 CVE
  46. 2,596.shelljs1 CVE
  47. 2,597.shenliru1 CVE
  48. 2,598.shit-server1 CVE
  49. 2,599.@shopify/hydrogen1 CVE
  50. 2,600.@shopify/koa-shopify-auth1 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →