npm Package Vulnerabilities

All 2,689 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 5,609 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 451.genieacs2 CVEs
  2. 452.ggit2 CVEs
  3. 453.gitbook2 CVEs
  4. 454.@github/copilot2 CVEs
  5. 455.@gitlawb/openclaude2 CVEs
  6. 456.glob-parent2 CVEs
  7. 457.@hapi/content2 CVEs
  8. 458.@hapi/wreck2 CVEs
  9. 459.Haraka2 CVEs
  10. 460.harp2 CVEs
  11. 461.hashbrown-cms2 CVEs
  12. 462.hawk2 CVEs
  13. 463.@haxtheweb/open-apis2 CVEs
  14. 464.@haxtheweb/video-player2 CVEs
  15. 465.hekto2 CVEs
  16. 466.hellojs2 CVEs
  17. 467.hexo2 CVEs
  18. 468.highcharts2 CVEs
  19. 469.hoek2 CVEs
  20. 470.html-janitor2 CVEs
  21. 471.html-pages2 CVEs
  22. 472.http-file-server2 CVEs
  23. 473.http-live-simulator2 CVEs
  24. 474.@hulumi/baseline2 CVEs
  25. 475.i18next2 CVEs
  26. 476.i18next-fs-backend2 CVEs
  27. 477.ip2 CVEs
  28. 478.is-my-json-valid2 CVEs
  29. 479.isolated-vm2 CVEs
  30. 480.is-svg2 CVEs
  31. 481.jellyfin-web2 CVEs
  32. 482.jose-browser-runtime2 CVEs
  33. 483.jpeg-js2 CVEs
  34. 484.jpv2 CVEs
  35. 485.jquery-file-upload2 CVEs
  36. 486.js-data2 CVEs
  37. 487.jsonata2 CVEs
  38. 488.jsoneditor2 CVEs
  39. 489.jsonpath2 CVEs
  40. 490.jsonpath-plus2 CVEs
  41. 491.json-ptr2 CVEs
  42. 492.jsreport2 CVEs
  43. 493.jsuites2 CVEs
  44. 494.jsx-slack2 CVEs
  45. 495.jszip2 CVEs
  46. 496.karma2 CVEs
  47. 497.keyget2 CVEs
  48. 498.@keystone-6/auth2 CVEs
  49. 499.kindeditor2 CVEs
  50. 500.@kindspells/astro-shield2 CVEs

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →