npm Package Vulnerabilities

All 2,957 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 7,177 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 451.@arikusi/deepseek-mcp-server2 CVEs
  2. 452.assign-deep2 CVEs
  3. 453.@astrojs/cloudflare2 CVEs
  4. 454.@astrojs/vercel2 CVEs
  5. 455.@asymmetric-effort/specifyjs2 CVEs
  6. 456.async-git2 CVEs
  7. 457.aws-cdk2 CVEs
  8. 458.@aws/lsp-codewhisperer2 CVEs
  9. 459.@backstage/plugin-proxy-backend2 CVEs
  10. 460.@backstage/plugin-scaffolder-backend-module-bitbucket-cloud2 CVEs
  11. 461.@backstage/plugin-scaffolder-backend-module-bitbucket-server2 CVEs
  12. 462.@backstage/plugin-scaffolder-backend-module-confluence-to-markdown2 CVEs
  13. 463.@backstage/plugin-scaffolder-node2 CVEs
  14. 464.@backstage/techdocs-common2 CVEs
  15. 465.@better-auth/sso2 CVEs
  16. 466.billboard.js2 CVEs
  17. 467.@bitbonsai/mcpvault2 CVEs
  18. 468.blitz2 CVEs
  19. 469.bmoor2 CVEs
  20. 470.bodymen2 CVEs
  21. 471.bootstrap-table2 CVEs
  22. 472.@boxlite-ai/boxlite2 CVEs
  23. 473.@braintree/sanitize-url2 CVEs
  24. 474.browserstack-runner2 CVEs
  25. 475.@budibase/worker2 CVEs
  26. 476.buttle2 CVEs
  27. 477.cached-path-relative2 CVEs
  28. 478.chrome-devtools-mcp2 CVEs
  29. 479.chromedriver2 CVEs
  30. 480.@ckeditor/ckeditor5-clipboard2 CVEs
  31. 481.@ckeditor/ckeditor5-html-support2 CVEs
  32. 482.@clerk/hono2 CVEs
  33. 483.@clerk/react-router2 CVEs
  34. 484.@clerk/shared2 CVEs
  35. 485.@clerk/tanstack-react-start2 CVEs
  36. 486.clevertap-web-sdk2 CVEs
  37. 487.cline2 CVEs
  38. 488.@cloudflare/workers-oauth-provider2 CVEs
  39. 489.color-string2 CVEs
  40. 490.compressing2 CVEs
  41. 491.@conform-to/dom2 CVEs
  42. 492.content2 CVEs
  43. 493.converse.js2 CVEs
  44. 494.cordova-plugin-inappbrowser2 CVEs
  45. 495.crud-file-server2 CVEs
  46. 496.css-what2 CVEs
  47. 497.csv-parse2 CVEs
  48. 498.@cubejs-backend/api-gateway2 CVEs
  49. 499.@cubejs-backend/server-core2 CVEs
  50. 500.@cyclonedx/cyclonedx-npm2 CVEs

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →