npm Package Vulnerabilities

All 2,710 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 5,796 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 2,651.whois1 CVE
  2. 2,652.@whyour/qinglong1 CVE
  3. 2,653.wifey1 CVE
  4. 2,654.wifiscanner1 CVE
  5. 2,655.willitmerge1 CVE
  6. 2,656.wincred1 CVE
  7. 2,657.wind-mvc1 CVE
  8. 2,658.window-control1 CVE
  9. 2,659.windows-build-tools1 CVE
  10. 2,660.windows-cpu1 CVE
  11. 2,661.windows-iedriver1 CVE
  12. 2,662.windows-latestchromedriver1 CVE
  13. 2,663.windows-selenium-chromedriver1 CVE
  14. 2,664.windows-seleniumjar1 CVE
  15. 2,665.windows-seleniumjar-mirror1 CVE
  16. 2,666.wintiwebdev1 CVE
  17. 2,667.wixtoolset1 CVE
  18. 2,668.@wong2/mcp-cli1 CVE
  19. 2,669.word-wrap1 CVE
  20. 2,670.workerd1 CVE
  21. 2,671.@workos/authkit-session1 CVE
  22. 2,672.@workos-inc/authkit-react-router1 CVE
  23. 2,673.worksmith1 CVE
  24. 2,674.workspace-tools1 CVE
  25. 2,675.w-zip1 CVE
  26. 2,676.x-assign1 CVE
  27. 2,677.xcode-mcp-server1 CVE
  28. 2,678.x-data-spreadsheet1 CVE
  29. 2,679.xd-testing1 CVE
  30. 2,680.@xhmikosr/decompress1 CVE
  31. 2,681.xml2js1 CVE
  32. 2,682.xmlhttprequest1 CVE
  33. 2,683.xopen1 CVE
  34. 2,684.xo-server1 CVE
  35. 2,685.xo-web1 CVE
  36. 2,686.xrpl1 CVE
  37. 2,687.xtalk1 CVE
  38. 2,688.xterm1 CVE
  39. 2,689.y18n1 CVE
  40. 2,690.@yaireo/tagify1 CVE
  41. 2,691.yargs-parser1 CVE
  42. 2,692.yauzl1 CVE
  43. 2,693.yeoman-environment1 CVE
  44. 2,694.yii2-mcp-server1 CVE
  45. 2,695.@yoda.digital/gitlab-mcp-server1 CVE
  46. 2,696.youtube-regex1 CVE
  47. 2,697.yttivy1 CVE
  48. 2,698.yui21 CVE
  49. 2,699.yyooopack1 CVE
  50. 2,700.yzt1 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →