npm Package Vulnerabilities

All 3,018 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 7,323 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 301.agnai3 CVEs
  2. 302.@angular/router3 CVEs
  3. 303.@angular/service-worker3 CVEs
  4. 304.@astrojs/netlify3 CVEs
  5. 305.@auth/core3 CVEs
  6. 306.@backstage/plugin-kubernetes-backend3 CVEs
  7. 307.@better-auth/scim3 CVEs
  8. 308.blamer3 CVEs
  9. 309.braces3 CVEs
  10. 310.browserify-shim3 CVEs
  11. 311.browserslist3 CVEs
  12. 312.bson3 CVEs
  13. 313.@bytebase/dbhub3 CVEs
  14. 314.@ckeditor/ckeditor5-engine3 CVEs
  15. 315.@ckeditor/ckeditor5-markdown-gfm3 CVEs
  16. 316.@clerk/astro3 CVEs
  17. 317.@clerk/backend3 CVEs
  18. 318.@clerk/express3 CVEs
  19. 319.@clerk/fastify3 CVEs
  20. 320.@clerk/nuxt3 CVEs
  21. 321.codecov3 CVEs
  22. 322.connect3 CVEs
  23. 323.crypto-js3 CVEs
  24. 324.cyberchef3 CVEs
  25. 325.debug3 CVEs
  26. 326.decode-uri-component3 CVEs
  27. 327.dns-sync3 CVEs
  28. 328.docsify3 CVEs
  29. 329.dojox3 CVEs
  30. 330.dset3 CVEs
  31. 331.dssrf3 CVEs
  32. 332.ecstatic3 CVEs
  33. 333.@enspirit/elo3 CVEs
  34. 334.@evomap/evolver3 CVEs
  35. 335.express-xss-sanitizer3 CVEs
  36. 336.expr-eval3 CVEs
  37. 337.@fastify/busboy3 CVEs
  38. 338.@fastify/express3 CVEs
  39. 339.@fastify/reply-from3 CVEs
  40. 340.feathers-sequelize3 CVEs
  41. 341.file-type3 CVEs
  42. 342.find-my-way3 CVEs
  43. 343.glance3 CVEs
  44. 344.@graphql-tools/executor-legacy-ws3 CVEs
  45. 345.grunt3 CVEs
  46. 346.@hapi/content3 CVEs
  47. 347.@hulumi/baseline3 CVEs
  48. 348.image-size3 CVEs
  49. 349.immer3 CVEs
  50. 350.immutable3 CVEs

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →