npm Package Vulnerabilities

All 2,647 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 5,291 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1,551.lab6.brit951 CVE
  2. 1,552.lab6drewfusbyu1 CVE
  3. 1,553.@lambda-middleware/json-deserializer1 CVE
  4. 1,554.@langchain/core1 CVE
  5. 1,555.@langchain/langgraph-checkpoint-mongodb1 CVE
  6. 1,556.@langchain/langgraph-checkpoint-redis1 CVE
  7. 1,557.larvitbase-api1 CVE
  8. 1,558.launchpad1 CVE
  9. 1,559.lazysizes1 CVE
  10. 1,560.ldapauth1 CVE
  11. 1,561.ldapauth-fork1 CVE
  12. 1,562.@leanprover/unicode-input-component1 CVE
  13. 1,563.lemonldap-ng-handler1 CVE
  14. 1,564.lessindex1 CVE
  15. 1,565.less-openui51 CVE
  16. 1,566.lettersanitizer1 CVE
  17. 1,567.libnmap1 CVE
  18. 1,568.libnotify1 CVE
  19. 1,569.libp2p1 CVE
  20. 1,570.@libp2p/kad-dht1 CVE
  21. 1,571.libpq1 CVE
  22. 1,572.libsbml1 CVE
  23. 1,573.libsbmlsim1 CVE
  24. 1,574.libxl1 CVE
  25. 1,575.libyaml1 CVE
  26. 1,576.liferay-ckeditor1 CVE
  27. 1,577.lifion-verify-deps1 CVE
  28. 1,578.lightning-flow-scanner1 CVE
  29. 1,579.lightning-server1 CVE
  30. 1,580.lilconfig1 CVE
  31. 1,581.limbus-buildgen1 CVE
  32. 1,582.limdu1 CVE
  33. 1,583.line-desktop-mcp1 CVE
  34. 1,584.linkifyjs1 CVE
  35. 1,585.linux-cmdline1 CVE
  36. 1,586.@lionello/secp256k1-js1 CVE
  37. 1,587.list-n-stream1 CVE
  38. 1,588.lite-dev-server1 CVE
  39. 1,589.lite-server1 CVE
  40. 1,590.litespeed.js1 CVE
  41. 1,591.lite-web-server1 CVE
  42. 1,592.liuyaserver1 CVE
  43. 1,593.lix1 CVE
  44. 1,594.liyujing1 CVE
  45. 1,595.locize1 CVE
  46. 1,596.lockfile-lint-api1 CVE
  47. 1,597.lodahs1 CVE
  48. 1,598.lodash.defaultsdeep1 CVE
  49. 1,599.lodash.pick1 CVE
  50. 1,600.lodash.set1 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →