npm Package Vulnerabilities
All 2,689 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 5,611 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.
- 1,001.cool-path1 CVE
- 1,002.copilot-api1 CVE
- 1,003.copy-props1 CVE
- 1,004.cordova-android1 CVE
- 1,005.cordova-plugin-fingerprint-aio1 CVE
- 1,006.cordova-plugin-ionic-webview1 CVE
- 1,007.corenlp-js-interface1 CVE
- 1,008.corenlp-js-prefab1 CVE
- 1,009.cors-anywhere1 CVE
- 1,010.counterpart1 CVE
- 1,011.coursevault-preview1 CVE
- 1,012.create-choo-app31 CVE
- 1,013.create-choo-electron1 CVE
- 1,014.critters1 CVE
- 1,015.crossenv1 CVE
- 1,016.cross-env.js1 CVE
- 1,017.cross-spawn1 CVE
- 1,018.cruddl1 CVE
- 1,019.crud-query-parser1 CVE
- 1,020.crumb1 CVE
- 1,021.cryo1 CVE
- 1,022.cryptiles1 CVE
- 1,023.crypto-es1 CVE
- 1,024.cryptpad1 CVE
- 1,025.csrf-lite1 CVE
- 1,026.csvjson1 CVE
- 1,027.csv-parse1 CVE
- 1,028.csvtojson1 CVE
- 1,029.cuciuci1 CVE
- 1,030.cue-sdk-node1 CVE
- 1,031.cumulative-distribution-function1 CVE
- 1,032.curling1 CVE
- 1,033.curljs1 CVE
- 1,034.curlrequest1 CVE
- 1,035.curly-bracket-parser1 CVE
- 1,036.curses1 CVE
- 1,037.@curveball/a12n-server1 CVE
- 1,038.@cyanheads/git-mcp-server1 CVE
- 1,039.cyber-js1 CVE
- 1,040.cycle-import-check1 CVE
- 1,041.@cyclonedx/cdxgen1 CVE
- 1,042.@cyclonedx/cyclonedx-library1 CVE
- 1,043.@cyclonedx/cyclonedx-npm1 CVE
- 1,044.@cyntler/react-doc-viewer1 CVE
- 1,045.@cypress/request1 CVE
- 1,046.cypserver1 CVE
- 1,047.d3.js1 CVE
- 1,048.@dadigua/hyperchat1 CVE
- 1,049.dalek-browser-chrome1 CVE
- 1,050.dalek-browser-chrome-canary1 CVE
Which npm packages run in YOUR stack?
EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.
Start Free Scan →