npm Package Vulnerabilities

All 2,691 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 5,641 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 301.safer-eval3 CVEs
  2. 302.sails3 CVEs
  3. 303.@samanhappy/mcphub3 CVEs
  4. 304.samlify3 CVEs
  5. 305.send3 CVEs
  6. 306.@sequelize/core3 CVEs
  7. 307.set-in3 CVEs
  8. 308.simplehttpserver3 CVEs
  9. 309.simple-markdown3 CVEs
  10. 310.slpjs3 CVEs
  11. 311.slp-validate3 CVEs
  12. 312.sm-crypto3 CVEs
  13. 313.snowflake-sdk3 CVEs
  14. 314.socket.io3 CVEs
  15. 315.stimulsoft-dashboards-js3 CVEs
  16. 316.@strapi/core3 CVEs
  17. 317.@strapi/plugin-content-manager3 CVEs
  18. 318.@strapi/utils3 CVEs
  19. 319.@theia/ai-chat3 CVEs
  20. 320.@theia/ai-chat-ui3 CVEs
  21. 321.@theia/ai-claude-code3 CVEs
  22. 322.@theia/ai-code-completion3 CVEs
  23. 323.@theia/ai-core3 CVEs
  24. 324.@theia/ai-editor3 CVEs
  25. 325.tinacms3 CVEs
  26. 326.tmp3 CVEs
  27. 327.tough-cookie3 CVEs
  28. 328.@typebot.io/js3 CVEs
  29. 329.typeorm3 CVEs
  30. 330.uap-core3 CVEs
  31. 331.@vitest/browser3 CVEs
  32. 332.@vrite/sdk3 CVEs
  33. 333.vuetify3 CVEs
  34. 334.@workos-inc/authkit-nextjs3 CVEs
  35. 335.xml-crypto3 CVEs
  36. 336.yapi-vendor3 CVEs
  37. 337.@aborruso/ckan-mcp-server2 CVEs
  38. 338.@actions/core2 CVEs
  39. 339.adm-zip2 CVEs
  40. 340.@adobe/css-tools2 CVEs
  41. 341.aedes2 CVEs
  42. 342.aegir2 CVEs
  43. 343.@agenticmail/api2 CVEs
  44. 344.@agenticmail/core2 CVEs
  45. 345.agents2 CVEs
  46. 346.ag-grid-community2 CVEs
  47. 347.ag-grid-enterprise2 CVEs
  48. 348.ajv2 CVEs
  49. 349.algoliasearch-helper2 CVEs
  50. 350.@anthropic-ai/sdk2 CVEs

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →