npm Package Vulnerabilities

All 2,689 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 5,610 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 601.@sentry/astro2 CVEs
  2. 602.@sentry/nextjs2 CVEs
  3. 603.serialize-to-js2 CVEs
  4. 604.serve-lite2 CVEs
  5. 605.serve-static2 CVEs
  6. 606.ses2 CVEs
  7. 607.set-value2 CVEs
  8. 608.shiba2 CVEs
  9. 609.simditor2 CVEs
  10. 610.snyk-gradle-plugin2 CVEs
  11. 611.socket.io-file2 CVEs
  12. 612.sockjs2 CVEs
  13. 613.@solana/web3.js2 CVEs
  14. 614.sqlite32 CVEs
  15. 615.squirrelly2 CVEs
  16. 616.ssrfcheck2 CVEs
  17. 617.ssri2 CVEs
  18. 618.st2 CVEs
  19. 619.statics-server2 CVEs
  20. 620.status-board2 CVEs
  21. 621.storybook2 CVEs
  22. 622.@strapi/database2 CVEs
  23. 623.@strikeentco/set2 CVEs
  24. 624.summernote2 CVEs
  25. 625.@sveltejs/adapter-node2 CVEs
  26. 626.@sync-in/server2 CVEs
  27. 627.@tak-ps/cloudtak2 CVEs
  28. 628.@theia/ai-ide2 CVEs
  29. 629.@theia/mini-browser2 CVEs
  30. 630.thrift2 CVEs
  31. 631.tiny-secp256k12 CVEs
  32. 632.tree-kill2 CVEs
  33. 633.tree-kit2 CVEs
  34. 634.@trpc/server2 CVEs
  35. 635.@tryghost/portal2 CVEs
  36. 636.tryton-sao2 CVEs
  37. 637.ts-deepmerge2 CVEs
  38. 638.turbo2 CVEs
  39. 639.uglify-js2 CVEs
  40. 640.@umbraco-cms/backoffice2 CVEs
  41. 641.underscore2 CVEs
  42. 642.useragent2 CVEs
  43. 643.utils-extend2 CVEs
  44. 644.uuid2 CVEs
  45. 645.vega-selections2 CVEs
  46. 646.@vendure/core2 CVEs
  47. 647.@vitejs/plugin-rsc2 CVEs
  48. 648.vitest2 CVEs
  49. 649.vxe-table2 CVEs
  50. 650.waku2 CVEs

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →