npm Package Vulnerabilities
All 2,689 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 5,611 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.
- 801.@backstage/catalog-model1 CVE
- 802.@backstage/cli-common1 CVE
- 803.@backstage/core-components1 CVE
- 804.@backstage/integration1 CVE
- 805.@backstage/plugin-app-backend1 CVE
- 806.@backstage/plugin-catalog-backend-module-unprocessed1 CVE
- 807.@backstage/plugin-catalog-unprocessed-entities1 CVE
- 808.@backstage/plugin-catalog-unprocessed-entities-common1 CVE
- 809.@backstage/plugin-permission-backend1 CVE
- 810.@backstage/plugin-techdocs1 CVE
- 811.badjs-sourcemap-server1 CVE
- 812.baileys1 CVE
- 813.baobab1 CVE
- 814.baremetrics-calendar1 CVE
- 815.baryton-saxophone1 CVE
- 816.base-x1 CVE
- 817.basic-auth-connect1 CVE
- 818.bassmaster1 CVE
- 819.bcoin1 CVE
- 820.bcrypt1 CVE
- 821.beautiful-mermaid1 CVE
- 822.@beproduct/nestjs-auth1 CVE
- 823.bestzip1 CVE
- 824.bigint-buffer1 CVE
- 825.bignum1 CVE
- 826.binary-parser1 CVE
- 827.bionode-sra1 CVE
- 828.@bit/loader1 CVE
- 829.bittorrent-dht1 CVE
- 830.bitty1 CVE
- 831.bkjs-wand1 CVE
- 832.bl1 CVE
- 833.@blackprint/engine1 CVE
- 834.@blakeembrey/template1 CVE
- 835.Blink1Control21 CVE
- 836.blinksocks1 CVE
- 837.blueimp-file-upload1 CVE
- 838.bn.js1 CVE
- 839.body-parser-xml1 CVE
- 840.bootbox1 CVE
- 841.bootstrap-multiselect1 CVE
- 842.bootstrap-select1 CVE
- 843.bostr1 CVE
- 844.botbait1 CVE
- 845.botframework-connector1 CVE
- 846.bower1 CVE
- 847.box2d-native1 CVE
- 848.bracket-template1 CVE
- 849.braft-editor1 CVE
- 850.@brikcss/merge1 CVE
Which npm packages run in YOUR stack?
EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.
Start Free Scan →