npm Package Vulnerabilities

All 2,957 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 7,177 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1,201.csvtojson1 CVE
  2. 1,202.cuciuci1 CVE
  3. 1,203.cue-sdk-node1 CVE
  4. 1,204.cumulative-distribution-function1 CVE
  5. 1,205.curling1 CVE
  6. 1,206.curljs1 CVE
  7. 1,207.curlrequest1 CVE
  8. 1,208.curly-bracket-parser1 CVE
  9. 1,209.curses1 CVE
  10. 1,210.@curveball/a12n-server1 CVE
  11. 1,211.@cyanheads/git-mcp-server1 CVE
  12. 1,212.cyber-js1 CVE
  13. 1,213.cycle-import-check1 CVE
  14. 1,214.@cyclonedx/cdxgen1 CVE
  15. 1,215.@cyclonedx/cyclonedx-library1 CVE
  16. 1,216.@cyntler/react-doc-viewer1 CVE
  17. 1,217.@cypress/request1 CVE
  18. 1,218.cypserver1 CVE
  19. 1,219.d3.js1 CVE
  20. 1,220.@dadigua/hyperchat1 CVE
  21. 1,221.dagu1 CVE
  22. 1,222.dalek-browser-chrome1 CVE
  23. 1,223.dalek-browser-chrome-canary1 CVE
  24. 1,224.dalek-browser-ie1 CVE
  25. 1,225.dalek-browser-ie-canary1 CVE
  26. 1,226.danger1 CVE
  27. 1,227.@dapperduckling/keycloak-connector-server1 CVE
  28. 1,228.darkreader1 CVE
  29. 1,229.dasafio1 CVE
  30. 1,230.dash-core-components1 CVE
  31. 1,231.dash-html-components1 CVE
  32. 1,232.datachannel-client1 CVE
  33. 1,233.datatables1 CVE
  34. 1,234.date-and-time1 CVE
  35. 1,235.dat.gui1 CVE
  36. 1,236.dawnsparks-node-tesseract1 CVE
  37. 1,237.dbgate1 CVE
  38. 1,238.dbgate-serve1 CVE
  39. 1,239.dcdcdcdcdc1 CVE
  40. 1,240.@dcl/single-sign-on-client1 CVE
  41. 1,241.dcserver1 CVE
  42. 1,242.deap1 CVE
  43. 1,243.decamelize1 CVE
  44. 1,244.decap-cms1 CVE
  45. 1,245.dectalk-tts1 CVE
  46. 1,246.deep.assign1 CVE
  47. 1,247.deep-defaults1 CVE
  48. 1,248.deep-extend1 CVE
  49. 1,249.deeply1 CVE
  50. 1,250.deepmergefn1 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →