npm Package Vulnerabilities

All 2,689 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 5,610 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 701.@alexbinary/object-deep-assign1 CVE
  2. 702.@alizeait/unflatto1 CVE
  3. 703.@allanlancioni/flatten-json1 CVE
  4. 704.@almela/obx1 CVE
  5. 705.altcha1 CVE
  6. 706.altcha-lib1 CVE
  7. 707.alto-saxophone1 CVE
  8. 708.@amoy/common1 CVE
  9. 709.anchorme1 CVE
  10. 710.@andrea9293/mcp-documentation-server1 CVE
  11. 711.@andrei-tatar/nora-firebase-common1 CVE
  12. 712.angular-base64-upload1 CVE
  13. 713.angular-http-server1 CVE
  14. 714.angular-jwt1 CVE
  15. 715.angular-redactor1 CVE
  16. 716.angular-sanitize1 CVE
  17. 717.angular-server-side-configuration1 CVE
  18. 718.angular-ui-notification1 CVE
  19. 719.ansi2html1 CVE
  20. 720.ansi-html1 CVE
  21. 721.ansi-regex1 CVE
  22. 722.ansi_up1 CVE
  23. 723.@antfu/utils1 CVE
  24. 724.@anthropic-ai/sandbox-runtime1 CVE
  25. 725.antsword1 CVE
  26. 726.@aofl/cli-lib1 CVE
  27. 727.@apeleghq/asn1-der1 CVE
  28. 728.apexcharts1 CVE
  29. 729.apex-publish-static-files1 CVE
  30. 730.apiconnect-cli-plugins1 CVE
  31. 731.@apidevtools/json-schema-ref-parser1 CVE
  32. 732.api-lab-mcp1 CVE
  33. 733.apk-parser1 CVE
  34. 734.apk-parser21 CVE
  35. 735.apk-parser31 CVE
  36. 736.@apollo/composition1 CVE
  37. 737.@apollo/experimental-nextjs-app-support1 CVE
  38. 738.@apollo/explorer1 CVE
  39. 739.@apollo/federation-internals1 CVE
  40. 740.@apollo/sandbox1 CVE
  41. 741.@apollo/server1 CVE
  42. 742.apollo-server1 CVE
  43. 743.@apollosproject/data-connector-rock1 CVE
  44. 744.@apostrophecms/cli1 CVE
  45. 745.app-builder-lib1 CVE
  46. 746.@apphp/object-resolver1 CVE
  47. 747.appium-chromedriver1 CVE
  48. 748.appium-desktop1 CVE
  49. 749.appium-mcp1 CVE
  50. 750.@appium/support1 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →