npm Package Vulnerabilities

All 2,760 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 6,242 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 151.@hono/node-server5 CVEs
  2. 152.http-proxy-middleware5 CVEs
  3. 153.katex5 CVEs
  4. 154.keystone5 CVEs
  5. 155.koa5 CVEs
  6. 156.magicmirror5 CVEs
  7. 157.mathjs5 CVEs
  8. 158.mcp-server-kubernetes5 CVEs
  9. 159.minimatch5 CVEs
  10. 160.mysql25 CVEs
  11. 161.oneuptime5 CVEs
  12. 162.path-to-regexp5 CVEs
  13. 163.@perfood/couch-auth5 CVEs
  14. 164.rendertron5 CVEs
  15. 165.safe-eval5 CVEs
  16. 166.serve5 CVEs
  17. 167.socket.io-parser5 CVEs
  18. 168.@steipete/summarize5 CVEs
  19. 169.@tinacms/graphql5 CVEs
  20. 170.total45 CVEs
  21. 171.vditor5 CVEs
  22. 172.vega-functions5 CVEs
  23. 173.xlsx5 CVEs
  24. 174.yarn5 CVEs
  25. 175.@adonisjs/bodyparser4 CVEs
  26. 176.angular-expressions4 CVEs
  27. 177.@apollo/gateway4 CVEs
  28. 178.auth0-lock4 CVEs
  29. 179.aws-cdk-lib4 CVEs
  30. 180.aws-iot-device-sdk-v24 CVEs
  31. 181.@backstage/plugin-auth-backend4 CVEs
  32. 182.basic-ftp4 CVEs
  33. 183.@better-auth/oauth-provider4 CVEs
  34. 184.@builder.io/qwik4 CVEs
  35. 185.@clerk/nextjs4 CVEs
  36. 186.code-server4 CVEs
  37. 187.convert-svg-core4 CVEs
  38. 188.@earendil-works/pi-coding-agent4 CVEs
  39. 189.elysia4 CVEs
  40. 190.erxes4 CVEs
  41. 191.express-cart4 CVEs
  42. 192.@fastify/middie4 CVEs
  43. 193.@fastify/static4 CVEs
  44. 194.@feathersjs/authentication-oauth4 CVEs
  45. 195.@finos/git-proxy4 CVEs
  46. 196.@grpc/grpc-js4 CVEs
  47. 197.hummus4 CVEs
  48. 198.i18next-http-middleware4 CVEs
  49. 199.@intlify/vue-i18n-core4 CVEs
  50. 200.ip-address4 CVEs

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →