npm Package Vulnerabilities

All 2,957 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 7,177 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 701.react-draft-wysiwyg2 CVEs
  2. 702.realms-shim2 CVEs
  3. 703.@remix-run/react2 CVEs
  4. 704.@remix-run/router2 CVEs
  5. 705.remotion2 CVEs
  6. 706.replicator2 CVEs
  7. 707.repomix2 CVEs
  8. 708.request2 CVEs
  9. 709.request-filtering-agent2 CVEs
  10. 710.reveal.js2 CVEs
  11. 711.rollbar2 CVEs
  12. 712.rollup2 CVEs
  13. 713.rollup-plugin-server2 CVEs
  14. 714.rwsdk2 CVEs
  15. 715.schema-inspector2 CVEs
  16. 716.scim-patch2 CVEs
  17. 717.scratch-svg-renderer2 CVEs
  18. 718.sds2 CVEs
  19. 719.semantic-release2 CVEs
  20. 720.semver2 CVEs
  21. 721.semver-regex2 CVEs
  22. 722.@sentry/astro2 CVEs
  23. 723.serialize-to-js2 CVEs
  24. 724.serve-lite2 CVEs
  25. 725.serve-static2 CVEs
  26. 726.ses2 CVEs
  27. 727.set-value2 CVEs
  28. 728.shiba2 CVEs
  29. 729.@sigstore/oci2 CVEs
  30. 730.simditor2 CVEs
  31. 731.@siteboon/claude-code-ui2 CVEs
  32. 732.snyk-gradle-plugin2 CVEs
  33. 733.socket.io-file2 CVEs
  34. 734.sockjs2 CVEs
  35. 735.@solana/web3.js2 CVEs
  36. 736.sqlite32 CVEs
  37. 737.squirrelly2 CVEs
  38. 738.ssrfcheck2 CVEs
  39. 739.ssri2 CVEs
  40. 740.st2 CVEs
  41. 741.@stablelib/cbor2 CVEs
  42. 742.statics-server2 CVEs
  43. 743.status-board2 CVEs
  44. 744.@storybook/addon-mcp2 CVEs
  45. 745.@storybook/addon-vitest2 CVEs
  46. 746.@storybook/core2 CVEs
  47. 747.@storybook/core-server2 CVEs
  48. 748.@storybook/experimental-addon-test2 CVEs
  49. 749.@strapi/database2 CVEs
  50. 750.@strikeentco/set2 CVEs

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →