npm Package Vulnerabilities

All 3,018 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 7,323 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 251.@finos/git-proxy4 CVEs
  2. 252.hummus4 CVEs
  3. 253.i18next-http-backend4 CVEs
  4. 254.i18next-http-middleware4 CVEs
  5. 255.isomorphic-git4 CVEs
  6. 256.jquery-validation4 CVEs
  7. 257.jsonwebtoken4 CVEs
  8. 258.kysely4 CVEs
  9. 259.langsmith4 CVEs
  10. 260.libxmljs4 CVEs
  11. 261.materialize-css4 CVEs
  12. 262.mcp-searxng4 CVEs
  13. 263.mercurius4 CVEs
  14. 264.meshcentral4 CVEs
  15. 265.mongo-express4 CVEs
  16. 266.mongosh4 CVEs
  17. 267.morgan4 CVEs
  18. 268.mppx4 CVEs
  19. 269.@nestjs/platform-fastify4 CVEs
  20. 270.@node-saml/node-saml4 CVEs
  21. 271.@nuxt/nitro-server4 CVEs
  22. 272.@nuxt/vite-builder4 CVEs
  23. 273.parse-dashboard4 CVEs
  24. 274.passport-wsfed-saml24 CVEs
  25. 275.@payloadcms/next4 CVEs
  26. 276.protobufjs-cli4 CVEs
  27. 277.quasar4 CVEs
  28. 278.re24 CVEs
  29. 279.remarkable4 CVEs
  30. 280.@saltcorn/server4 CVEs
  31. 281.@samanhappy/mcphub4 CVEs
  32. 282.@sap/approuter4 CVEs
  33. 283.sharp4 CVEs
  34. 284.sm-crypto4 CVEs
  35. 285.snowflake-sdk4 CVEs
  36. 286.snyk4 CVEs
  37. 287.storybook4 CVEs
  38. 288.@strapi/admin4 CVEs
  39. 289.stream-json4 CVEs
  40. 290.svgo4 CVEs
  41. 291.tar-fs4 CVEs
  42. 292.typeorm4 CVEs
  43. 293.@uppy/companion4 CVEs
  44. 294.valine4 CVEs
  45. 295.webpack4 CVEs
  46. 296.wrangler4 CVEs
  47. 297.xdlocalstorage4 CVEs
  48. 298.yapi-vendor4 CVEs
  49. 299.yui4 CVEs
  50. 300.@adonisjs/http-server3 CVEs

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →