npm Package Vulnerabilities

All 3,018 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 7,323 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 3,001.@yoda.digital/gitlab-mcp-server1 CVE
  2. 3,002.youtransfer1 CVE
  3. 3,003.youtube-regex1 CVE
  4. 3,004.yttivy1 CVE
  5. 3,005.yui21 CVE
  6. 3,006.yyooopack1 CVE
  7. 3,007.yzt1 CVE
  8. 3,008.@zag-js/core1 CVE
  9. 3,009.@zenalexa/unicli1 CVE
  10. 3,010.@zenuml/core1 CVE
  11. 3,011.zip-local1 CVE
  12. 3,012.zjjserver1 CVE
  13. 3,013.zod1 CVE
  14. 3,014.@zowe/cli1 CVE
  15. 3,015.@zowe/imperative1 CVE
  16. 3,016.zrender1 CVE
  17. 3,017.zsa1 CVE
  18. 3,018.zwserver1 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →