npm Package Vulnerabilities

All 2,957 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 7,177 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 751.sublinear-time-solver2 CVEs
  2. 752.summernote2 CVEs
  3. 753.suneditor2 CVEs
  4. 754.@sveltejs/adapter-node2 CVEs
  5. 755.swiper2 CVEs
  6. 756.@tak-ps/cloudtak2 CVEs
  7. 757.@tanstack/react-start2 CVEs
  8. 758.@tanstack/solid-start2 CVEs
  9. 759.@tanstack/start-server-core2 CVEs
  10. 760.@tanstack/vue-start2 CVEs
  11. 761.@theia/ai-ide2 CVEs
  12. 762.@theia/mini-browser2 CVEs
  13. 763.thrift2 CVEs
  14. 764.@tinacms/app2 CVEs
  15. 765.tinypool2 CVEs
  16. 766.tiny-secp256k12 CVEs
  17. 767.tree-kill2 CVEs
  18. 768.tree-kit2 CVEs
  19. 769.@trpc/server2 CVEs
  20. 770.@tryghost/portal2 CVEs
  21. 771.tryton-sao2 CVEs
  22. 772.ts-deepmerge2 CVEs
  23. 773.turbo2 CVEs
  24. 774.uglify-js2 CVEs
  25. 775.@umbraco-cms/backoffice2 CVEs
  26. 776.underscore2 CVEs
  27. 777.uploadfs2 CVEs
  28. 778.useragent2 CVEs
  29. 779.utils-extend2 CVEs
  30. 780.valibot2 CVEs
  31. 781.vega-selections2 CVEs
  32. 782.velocityjs2 CVEs
  33. 783.@vitejs/plugin-rsc2 CVEs
  34. 784.vxe-table2 CVEs
  35. 785.waku2 CVEs
  36. 786.webpack-dev-middleware2 CVEs
  37. 787.websocket-driver2 CVEs
  38. 788.whistle2 CVEs
  39. 789.@whyour/qinglong2 CVEs
  40. 790.@wonderwhy-er/desktop-commander2 CVEs
  41. 791.@workos-inc/authkit-remix2 CVEs
  42. 792.@xhmikosr/decompress2 CVEs
  43. 793.xmlhttprequest-ssl2 CVEs
  44. 794.yaml2 CVEs
  45. 795.zx2 CVEs
  46. 796.1011 CVE
  47. 797.11xiaoli1 CVE
  48. 798.22lixian1 CVE
  49. 799.360class.jansenhm1 CVE
  50. 800.6261 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →