npm Package Vulnerabilities

All 2,957 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 7,177 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 651.mqtt-packet2 CVEs
  2. 652.ms2 CVEs
  3. 653.m-server2 CVEs
  4. 654.msrcrypto2 CVEs
  5. 655.multi-ini2 CVEs
  6. 656.mversion2 CVEs
  7. 657.mysql2 CVEs
  8. 658.@nestjs/core2 CVEs
  9. 659.@nestjs/microservices2 CVEs
  10. 660.netmask2 CVEs
  11. 661.next-tinacms-azure2 CVEs
  12. 662.@nguniversal/common2 CVEs
  13. 663.nitro2 CVEs
  14. 664.nitropack2 CVEs
  15. 665.@nocobase/plugin-collection-sql2 CVEs
  16. 666.@node-red/runtime2 CVEs
  17. 667.@node-saml/passport-saml2 CVEs
  18. 668.@npmcli/arborist2 CVEs
  19. 669.@nubosoftware/node-static2 CVEs
  20. 670.nunjucks2 CVEs
  21. 671.nuxt-api-party2 CVEs
  22. 672.@nx/azure-cache2 CVEs
  23. 673.@oakserver/oak2 CVEs
  24. 674.oauth2-server2 CVEs
  25. 675.@ooples/token-optimizer-mcp2 CVEs
  26. 676.@openai/codex2 CVEs
  27. 677.@openc3/tool-common2 CVEs
  28. 678.opencc2 CVEs
  29. 679.@openclaw/voice-call2 CVEs
  30. 680.opencode-ai2 CVEs
  31. 681.openlearnx2 CVEs
  32. 682.@openzeppelin/wizard2 CVEs
  33. 683.@orval/core2 CVEs
  34. 684.outray2 CVEs
  35. 685.pannellum2 CVEs
  36. 686.parse2 CVEs
  37. 687.@payloadcms/plugin-multi-tenant2 CVEs
  38. 688.@payloadcms/storage-s32 CVEs
  39. 689.pdfmake2 CVEs
  40. 690.@pdfme/common2 CVEs
  41. 691.picomatch2 CVEs
  42. 692.piscina2 CVEs
  43. 693.plotly.js2 CVEs
  44. 694.postcss-selector-parser2 CVEs
  45. 695.private-ip2 CVEs
  46. 696.pug2 CVEs
  47. 697.pug-code-gen2 CVEs
  48. 698.putil-merge2 CVEs
  49. 699.querymen2 CVEs
  50. 700.quill2 CVEs

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →