npm Package Vulnerabilities

All 2,689 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 5,611 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 851.broccoli-closure1 CVE
  2. 852.broccoli-compass1 CVE
  3. 853.browserify-hmr1 CVE
  4. 854.browserify-sign1 CVE
  5. 855.browserless-chrome1 CVE
  6. 856.browserslist1 CVE
  7. 857.browserstack-local1 CVE
  8. 858.bsock1 CVE
  9. 859.bson-objectid1 CVE
  10. 860.@bsv/sdk1 CVE
  11. 861.@budibase/bbui1 CVE
  12. 862.@budibase/builder1 CVE
  13. 863.bun1 CVE
  14. 864.buns1 CVE
  15. 865.@bunt/app1 CVE
  16. 866.buttercms1 CVE
  17. 867.buttercup1 CVE
  18. 868.bwm-ng1 CVE
  19. 869.byucslabsix1 CVE
  20. 870.calipso1 CVE
  21. 871.call1 CVE
  22. 872.calmquist.static-server1 CVE
  23. 873.canvas1 CVE
  24. 874.canvg1 CVE
  25. 875.caolilinode1 CVE
  26. 876.@capgo/capacitor-native-biometric1 CVE
  27. 877.@capgo/cli1 CVE
  28. 878.@cap-js/db-service1 CVE
  29. 879.@cap-js/postgres1 CVE
  30. 880.@cap-js/sqlite1 CVE
  31. 881.carbone1 CVE
  32. 882.@casl/ability1 CVE
  33. 883.casperjs1 CVE
  34. 884.cassproject1 CVE
  35. 885.@cat5th/key-serializer1 CVE
  36. 886.cattown1 CVE
  37. 887.cdk1 CVE
  38. 888.cd-messenger1 CVE
  39. 889.@cdr0/sg1 CVE
  40. 890.ced1 CVE
  41. 891.@cedar-policy/authorization-for-expressjs1 CVE
  42. 892.cedipay-core1 CVE
  43. 893.censorify.tanisjr1 CVE
  44. 894.cezerin1 CVE
  45. 895.@chainsafe/libp2p-noise1 CVE
  46. 896.@chainsafe/lodestar1 CVE
  47. 897.changeset1 CVE
  48. 898.charset1 CVE
  49. 899.chart.js1 CVE
  50. 900.chartkick1 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →