npm Package Vulnerabilities

All 2,691 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 5,625 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 251.grunt3 CVEs
  2. 252.@hulumi/policies3 CVEs
  3. 253.immer3 CVEs
  4. 254.immutable3 CVEs
  5. 255.@intlify/core3 CVEs
  6. 256.@intlify/core-base3 CVEs
  7. 257.@janhq/core3 CVEs
  8. 258.@jmondi/url-to-png3 CVEs
  9. 259.jodit3 CVEs
  10. 260.jointjs3 CVEs
  11. 261.jose3 CVEs
  12. 262.jose-node-cjs-runtime3 CVEs
  13. 263.jose-node-esm-runtime3 CVEs
  14. 264.json-pointer3 CVEs
  15. 265.js-toml3 CVEs
  16. 266.keycloak-connect3 CVEs
  17. 267.@langchain/community3 CVEs
  18. 268.layui3 CVEs
  19. 269.llhttp3 CVEs
  20. 270.loader-utils3 CVEs
  21. 271.@lobehub/lobehub3 CVEs
  22. 272.mailgen3 CVEs
  23. 273.@mariozechner/pi-coding-agent3 CVEs
  24. 274.@materializecss/materialize3 CVEs
  25. 275.mcp-markdownify-server3 CVEs
  26. 276.@modelcontextprotocol/sdk3 CVEs
  27. 277.multiparty3 CVEs
  28. 278.mxgraph3 CVEs
  29. 279.nadesiko33 CVEs
  30. 280.node-fetch3 CVEs
  31. 281.node-jose3 CVEs
  32. 282.node-opcua3 CVEs
  33. 283.node-red-dashboard3 CVEs
  34. 284.node-saml3 CVEs
  35. 285.nuxt-og-image3 CVEs
  36. 286.@nuxt/rspack-builder3 CVEs
  37. 287.@nuxt/webpack-builder3 CVEs
  38. 288.object-path3 CVEs
  39. 289.openmct3 CVEs
  40. 290.passport-saml3 CVEs
  41. 291.@payloadcms/graphql3 CVEs
  42. 292.@payloadcms/next3 CVEs
  43. 293.pdf-image3 CVEs
  44. 294.@plone/volto3 CVEs
  45. 295.psitransfer3 CVEs
  46. 296.public3 CVEs
  47. 297.raneto3 CVEs
  48. 298.@remix-run/server-runtime3 CVEs
  49. 299.safer-eval3 CVEs
  50. 300.sails3 CVEs

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →