npm Package Vulnerabilities

All 2,957 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 7,177 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 601.jpeg-js2 CVEs
  2. 602.jpv2 CVEs
  3. 603.jquery-file-upload2 CVEs
  4. 604.js-data2 CVEs
  5. 605.jsondiffpatch2 CVEs
  6. 606.jsoneditor2 CVEs
  7. 607.jsonpath2 CVEs
  8. 608.jsonpath-plus2 CVEs
  9. 609.json-ptr2 CVEs
  10. 610.jsreport2 CVEs
  11. 611.jsuites2 CVEs
  12. 612.jsx-slack2 CVEs
  13. 613.jszip2 CVEs
  14. 614.karma2 CVEs
  15. 615.keyget2 CVEs
  16. 616.@keystone-6/auth2 CVEs
  17. 617.kindeditor2 CVEs
  18. 618.@kindspells/astro-shield2 CVEs
  19. 619.knex2 CVEs
  20. 620.knowns2 CVEs
  21. 621.langchain2 CVEs
  22. 622.libnested2 CVEs
  23. 623.libxmljs22 CVEs
  24. 624.linkify-it2 CVEs
  25. 625.localhost-now2 CVEs
  26. 626.lodash.template2 CVEs
  27. 627.lodash.unset2 CVEs
  28. 628.madlib-object-utils2 CVEs
  29. 629.mapbox.js2 CVEs
  30. 630.markdown-pdf2 CVEs
  31. 631.mathjax2 CVEs
  32. 632.mathlive2 CVEs
  33. 633.matrix-appservice-bridge2 CVEs
  34. 634.mcp-from-openapi2 CVEs
  35. 635.mcstatic2 CVEs
  36. 636.md-to-pdf2 CVEs
  37. 637.merge2 CVEs
  38. 638.merge-deep2 CVEs
  39. 639.@mikro-orm/core2 CVEs
  40. 640.minimist2 CVEs
  41. 641.misskey-js2 CVEs
  42. 642.mixin-deep2 CVEs
  43. 643.mjml2 CVEs
  44. 644.mlflow2 CVEs
  45. 645.@mobilenext/mobile-mcp2 CVEs
  46. 646.@modelcontextprotocol/inspector2 CVEs
  47. 647.@modelcontextprotocol/server-filesystem2 CVEs
  48. 648.mootools2 CVEs
  49. 649.mout2 CVEs
  50. 650.mpath2 CVEs

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →