npm Package Vulnerabilities

All 2,760 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 6,245 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 251.bson3 CVEs
  2. 252.ckeditor53 CVEs
  3. 253.@ckeditor/ckeditor5-markdown-gfm3 CVEs
  4. 254.@clerk/astro3 CVEs
  5. 255.@clerk/backend3 CVEs
  6. 256.@clerk/express3 CVEs
  7. 257.@clerk/fastify3 CVEs
  8. 258.@clerk/nuxt3 CVEs
  9. 259.codecov3 CVEs
  10. 260.connect3 CVEs
  11. 261.convict3 CVEs
  12. 262.crypto-js3 CVEs
  13. 263.debug3 CVEs
  14. 264.decompress3 CVEs
  15. 265.dns-sync3 CVEs
  16. 266.docsify3 CVEs
  17. 267.dojox3 CVEs
  18. 268.dset3 CVEs
  19. 269.dssrf3 CVEs
  20. 270.ecstatic3 CVEs
  21. 271.@evomap/evolver3 CVEs
  22. 272.exifreader3 CVEs
  23. 273.express-xss-sanitizer3 CVEs
  24. 274.@fastify/express3 CVEs
  25. 275.@fastify/reply-from3 CVEs
  26. 276.feathers-sequelize3 CVEs
  27. 277.file-type3 CVEs
  28. 278.find-my-way3 CVEs
  29. 279.generator-jhipster3 CVEs
  30. 280.glance3 CVEs
  31. 281.grunt3 CVEs
  32. 282.@hulumi/policies3 CVEs
  33. 283.image-size3 CVEs
  34. 284.immer3 CVEs
  35. 285.immutable3 CVEs
  36. 286.@intlify/core3 CVEs
  37. 287.@intlify/core-base3 CVEs
  38. 288.@janhq/core3 CVEs
  39. 289.@jmondi/url-to-png3 CVEs
  40. 290.jointjs3 CVEs
  41. 291.jose3 CVEs
  42. 292.jose-node-cjs-runtime3 CVEs
  43. 293.jose-node-esm-runtime3 CVEs
  44. 294.json-pointer3 CVEs
  45. 295.js-toml3 CVEs
  46. 296.keycloak-connect3 CVEs
  47. 297.@langchain/community3 CVEs
  48. 298.layui3 CVEs
  49. 299.llhttp3 CVEs
  50. 300.loader-utils3 CVEs

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →