npm Package Vulnerabilities

All 2,689 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 5,613 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1,051.dalek-browser-ie1 CVE
  2. 1,052.dalek-browser-ie-canary1 CVE
  3. 1,053.@dapperduckling/keycloak-connector-server1 CVE
  4. 1,054.dasafio1 CVE
  5. 1,055.dash-core-components1 CVE
  6. 1,056.dash-html-components1 CVE
  7. 1,057.datachannel-client1 CVE
  8. 1,058.datatables1 CVE
  9. 1,059.date-and-time1 CVE
  10. 1,060.dat.gui1 CVE
  11. 1,061.dawnsparks-node-tesseract1 CVE
  12. 1,062.dbgate1 CVE
  13. 1,063.dbgate-serve1 CVE
  14. 1,064.dcdcdcdcdc1 CVE
  15. 1,065.@dcl/single-sign-on-client1 CVE
  16. 1,066.dcserver1 CVE
  17. 1,067.dd-trace1 CVE
  18. 1,068.deap1 CVE
  19. 1,069.decamelize1 CVE
  20. 1,070.decap-cms1 CVE
  21. 1,071.decode-uri-component1 CVE
  22. 1,072.dectalk-tts1 CVE
  23. 1,073.deep.assign1 CVE
  24. 1,074.deep-defaults1 CVE
  25. 1,075.deep-extend1 CVE
  26. 1,076.deeply1 CVE
  27. 1,077.deepmergefn1 CVE
  28. 1,078.deepmerge-ts1 CVE
  29. 1,079.deep-object-diff1 CVE
  30. 1,080.deep-override1 CVE
  31. 1,081.deep-parse-json1 CVE
  32. 1,082.deepref1 CVE
  33. 1,083.deeps1 CVE
  34. 1,084.deep-set1 CVE
  35. 1,085.@deepstream/server1 CVE
  36. 1,086.deferred-exec1 CVE
  37. 1,087.defu1 CVE
  38. 1,088.defuddle1 CVE
  39. 1,089.degenerator1 CVE
  40. 1,090.@delmaredigital/payload-puck1 CVE
  41. 1,091.deobfuscator1 CVE
  42. 1,092.depath1 CVE
  43. 1,093.desafio1 CVE
  44. 1,094.devcert-sanscache1 CVE
  45. 1,095.@developer.notchatbot/webchat1 CVE
  46. 1,096.@devicefarmer/stf1 CVE
  47. 1,097.dexie1 CVE
  48. 1,098.@dfinity/auth-client1 CVE
  49. 1,099.@dfinity/identity1 CVE
  50. 1,100.dgard8.lab61 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →