npm Package Vulnerabilities

All 3,018 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 7,323 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 351.@janhq/core3 CVEs
  2. 352.@jmondi/url-to-png3 CVEs
  3. 353.jointjs3 CVEs
  4. 354.jose3 CVEs
  5. 355.jose-node-cjs-runtime3 CVEs
  6. 356.jose-node-esm-runtime3 CVEs
  7. 357.json-pointer3 CVEs
  8. 358.js-toml3 CVEs
  9. 359.keycloak-connect3 CVEs
  10. 360.@langchain/community3 CVEs
  11. 361.layui3 CVEs
  12. 362.@libp2p/gossipsub3 CVEs
  13. 363.link-preview-js3 CVEs
  14. 364.llhttp3 CVEs
  15. 365.loader-utils3 CVEs
  16. 366.@lobehub/lobehub3 CVEs
  17. 367.mailgen3 CVEs
  18. 368.@mariozechner/pi-coding-agent3 CVEs
  19. 369.@materializecss/materialize3 CVEs
  20. 370.mcp-markdownify-server3 CVEs
  21. 371.@mockoon/cli3 CVEs
  22. 372.@mockoon/commons-server3 CVEs
  23. 373.@modelcontextprotocol/server3 CVEs
  24. 374.multiparty3 CVEs
  25. 375.mxgraph3 CVEs
  26. 376.nadesiko33 CVEs
  27. 377.node-fetch3 CVEs
  28. 378.node-jose3 CVEs
  29. 379.node-red-dashboard3 CVEs
  30. 380.node-saml3 CVEs
  31. 381.@nuxt/devtools3 CVEs
  32. 382.@nuxtjs/mdc3 CVEs
  33. 383.@nuxt/rspack-builder3 CVEs
  34. 384.@nuxt/webpack-builder3 CVEs
  35. 385.object-path3 CVEs
  36. 386.@openclaw/feishu3 CVEs
  37. 387.openmct3 CVEs
  38. 388.@opennextjs/cloudflare3 CVEs
  39. 389.@paperclipai/server3 CVEs
  40. 390.passport-saml3 CVEs
  41. 391.@payloadcms/graphql3 CVEs
  42. 392.pbkdf23 CVEs
  43. 393.pdf-image3 CVEs
  44. 394.pdfjs-dist3 CVEs
  45. 395.@pdfme/schemas3 CVEs
  46. 396.@plone/volto3 CVEs
  47. 397.@prompty/core3 CVEs
  48. 398.psitransfer3 CVEs
  49. 399.public3 CVEs
  50. 400.raneto3 CVEs

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →