npm Package Vulnerabilities

All 2,693 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 5,656 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 351.apidoc-core2 CVEs
  2. 352.@apify/actors-mcp-server2 CVEs
  3. 353.@apollo/query-planner2 CVEs
  4. 354.app-builder-lib2 CVEs
  5. 355.assign-deep2 CVEs
  6. 356.@astrojs/cloudflare2 CVEs
  7. 357.@asymmetric-effort/specifyjs2 CVEs
  8. 358.async-git2 CVEs
  9. 359.aws-cdk2 CVEs
  10. 360.@backstage/backend-defaults2 CVEs
  11. 361.@backstage/plugin-catalog-backend2 CVEs
  12. 362.@backstage/plugin-scaffolder-node2 CVEs
  13. 363.@backstage/plugin-techdocs-backend2 CVEs
  14. 364.@backstage/techdocs-common2 CVEs
  15. 365.@better-auth/sso2 CVEs
  16. 366.billboard.js2 CVEs
  17. 367.@bitbonsai/mcpvault2 CVEs
  18. 368.blitz2 CVEs
  19. 369.bmoor2 CVEs
  20. 370.bodymen2 CVEs
  21. 371.bootstrap-table2 CVEs
  22. 372.@boxlite-ai/boxlite2 CVEs
  23. 373.braces2 CVEs
  24. 374.@braintree/sanitize-url2 CVEs
  25. 375.browserstack-runner2 CVEs
  26. 376.@budibase/worker2 CVEs
  27. 377.buttle2 CVEs
  28. 378.cached-path-relative2 CVEs
  29. 379.chromedriver2 CVEs
  30. 380.ckeditor52 CVEs
  31. 381.@ckeditor/ckeditor5-clipboard2 CVEs
  32. 382.@clerk/hono2 CVEs
  33. 383.@clerk/react-router2 CVEs
  34. 384.@clerk/shared2 CVEs
  35. 385.@clerk/tanstack-react-start2 CVEs
  36. 386.@cloudflare/workers-oauth-provider2 CVEs
  37. 387.color-string2 CVEs
  38. 388.compressing2 CVEs
  39. 389.@conform-to/dom2 CVEs
  40. 390.converse.js2 CVEs
  41. 391.cordova-plugin-inappbrowser2 CVEs
  42. 392.crud-file-server2 CVEs
  43. 393.crypto-js2 CVEs
  44. 394.css-what2 CVEs
  45. 395.@cubejs-backend/api-gateway2 CVEs
  46. 396.@cubejs-backend/server-core2 CVEs
  47. 397.cyberchef2 CVEs
  48. 398.datatables.net2 CVEs
  49. 399.dbgate-api2 CVEs
  50. 400.dbgate-web2 CVEs

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →