npm Package Vulnerabilities

All 2,710 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 5,796 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 2,701.@zag-js/core1 CVE
  2. 2,702.@zenuml/core1 CVE
  3. 2,703.zip-local1 CVE
  4. 2,704.zjjserver1 CVE
  5. 2,705.zod1 CVE
  6. 2,706.@zowe/cli1 CVE
  7. 2,707.@zowe/imperative1 CVE
  8. 2,708.zrender1 CVE
  9. 2,709.zsa1 CVE
  10. 2,710.zwserver1 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →