npm Package Vulnerabilities
All 3,018 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 7,323 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.
- 2,901.video.js1 CVE
- 2,902.@viking04/merge1 CVE
- 2,903.vis-timeline1 CVE
- 2,904.vite-plugin-static-copy1 CVE
- 2,905.@vitest/ui1 CVE
- 2,906.@vltpkg/tar1 CVE
- 2,907.vmd1 CVE
- 2,908.vnu-jar1 CVE
- 2,909.vscode-npm-script1 CVE
- 2,910.vue1 CVE
- 2,911.@vue/cli-plugin-pwa1 CVE
- 2,912.@vuelidate/validators1 CVE
- 2,913.vue-storefront-api1 CVE
- 2,914.vue-template-compiler1 CVE
- 2,915.vulnogram1 CVE
- 2,916.vvvebjs1 CVE
- 2,917.vvvebJs1 CVE
- 2,918.@wakaru/cli1 CVE
- 2,919.@waline/vercel1 CVE
- 2,920.@wangeditor/editor1 CVE
- 2,921.wangguojing1231 CVE
- 2,922.wasdk1 CVE
- 2,923.waterline-sequel1 CVE
- 2,924.wazuh1 CVE
- 2,925.@wdio/browserstack-service1 CVE
- 2,926.weather.swlyons1 CVE
- 2,927.web3-core-method1 CVE
- 2,928.web3-core-subscriptions1 CVE
- 2,929.@web3-react/coinbase-wallet1 CVE
- 2,930.@web3-react/eip11931 CVE
- 2,931.@web3-react/metamask1 CVE
- 2,932.@web3-react/walletconnect1 CVE
- 2,933.web3-utils1 CVE
- 2,934.webcrack1 CVE
- 2,935.webdriver-launcher1 CVE
- 2,936.webdrvr1 CVE
- 2,937.webfinger.js1 CVE
- 2,938.@webiny/react-rich-text-renderer1 CVE
- 2,939.webmention.js1 CVE
- 2,940.web-node-server1 CVE
- 2,941.webpack-subresource-integrity1 CVE
- 2,942.@webrecorder/archivewebpage1 CVE
- 2,943.@webrecorder/wabac1 CVE
- 2,944.webrtc-native1 CVE
- 2,945.websocket-extensions1 CVE
- 2,946.webtorrent1 CVE
- 2,947.webui-aria21 CVE
- 2,948.welcomyzt1 CVE
- 2,949.wetty1 CVE
- 2,950.wffserve1 CVE
Which npm packages run in YOUR stack?
EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.
Book a Demo →