npm Package Vulnerabilities
All 2,709 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 5,789 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.
- 2,601.@vltpkg/tar1 CVE
- 2,602.vmd1 CVE
- 2,603.vnu-jar1 CVE
- 2,604.vscode-npm-script1 CVE
- 2,605.vue1 CVE
- 2,606.@vue/cli-plugin-pwa1 CVE
- 2,607.@vuelidate/validators1 CVE
- 2,608.vue-storefront-api1 CVE
- 2,609.vue-template-compiler1 CVE
- 2,610.vulnogram1 CVE
- 2,611.vvvebjs1 CVE
- 2,612.vvvebJs1 CVE
- 2,613.@wangeditor/editor1 CVE
- 2,614.wangguojing1231 CVE
- 2,615.wasdk1 CVE
- 2,616.waterline-sequel1 CVE
- 2,617.wazuh1 CVE
- 2,618.@wdio/browserstack-service1 CVE
- 2,619.weather.swlyons1 CVE
- 2,620.web3-core-method1 CVE
- 2,621.web3-core-subscriptions1 CVE
- 2,622.@web3-react/coinbase-wallet1 CVE
- 2,623.@web3-react/eip11931 CVE
- 2,624.@web3-react/metamask1 CVE
- 2,625.@web3-react/walletconnect1 CVE
- 2,626.web3-utils1 CVE
- 2,627.webcrack1 CVE
- 2,628.webdriver-launcher1 CVE
- 2,629.webdrvr1 CVE
- 2,630.webfinger.js1 CVE
- 2,631.@webiny/react-rich-text-renderer1 CVE
- 2,632.webmention.js1 CVE
- 2,633.web-node-server1 CVE
- 2,634.webpack-dev-middleware1 CVE
- 2,635.webpack-subresource-integrity1 CVE
- 2,636.@webrecorder/archivewebpage1 CVE
- 2,637.@webrecorder/wabac1 CVE
- 2,638.webrtc-native1 CVE
- 2,639.websocket-extensions1 CVE
- 2,640.webtorrent1 CVE
- 2,641.webui-aria21 CVE
- 2,642.welcomyzt1 CVE
- 2,643.wetty1 CVE
- 2,644.wffserve1 CVE
- 2,645.whatsapp-api-js1 CVE
- 2,646.whereis1 CVE
- 2,647.@whiskeysockets/baileys1 CVE
- 2,648.whispercast1 CVE
- 2,649.whistle1 CVE
- 2,650.whois1 CVE
Which npm packages run in YOUR stack?
EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.
Start Free Scan →