npm Package Vulnerabilities

All 2,689 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 5,615 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1,251.@firebase/util1 CVE
  2. 1,252.firepad1 CVE
  3. 1,253.fis-parser-sass-bin1 CVE
  4. 1,254.fis-sass-all1 CVE
  5. 1,255.flags1 CVE
  6. 1,256.flat1 CVE
  7. 1,257.flatnest1 CVE
  8. 1,258.flattenizer1 CVE
  9. 1,259.flat-to-nested1 CVE
  10. 1,260.flintcms1 CVE
  11. 1,261.Flowise1 CVE
  12. 1,262.flowise-embed1 CVE
  13. 1,263.fluture-node1 CVE
  14. 1,264.@fonoster/voice1 CVE
  15. 1,265.font-converter1 CVE
  16. 1,266.form-data-objectizer1 CVE
  17. 1,267.formidable1 CVE
  18. 1,268.formstone1 CVE
  19. 1,269.forwarded1 CVE
  20. 1,270.foundation-sites1 CVE
  21. 1,271.@fraction/oasis1 CVE
  22. 1,272.frames-compiler1 CVE
  23. 1,273.freediskspace1 CVE
  24. 1,274.fresh1 CVE
  25. 1,275.@frontmcp/adapters1 CVE
  26. 1,276.@frontmcp/sdk1 CVE
  27. 1,277.frourio1 CVE
  28. 1,278.frourio-express1 CVE
  29. 1,279.fsa1 CVE
  30. 1,280.fsevents1 CVE
  31. 1,281.fs-git1 CVE
  32. 1,282.fsk-server1 CVE
  33. 1,283.fs-path1 CVE
  34. 1,284.fstream1 CVE
  35. 1,285.@fuel-ts/account1 CVE
  36. 1,286.fun-map1 CVE
  37. 1,287.fuseki1 CVE
  38. 1,288.galenframework-cli1 CVE
  39. 1,289.gammautils1 CVE
  40. 1,290.gaoxiaotingtingting1 CVE
  41. 1,291.gaoxuyan1 CVE
  42. 1,292.gatsby1 CVE
  43. 1,293.gatsby-plugin-mdx1 CVE
  44. 1,294.gatsby-plugin-sharp1 CVE
  45. 1,295.gatsby-source-wordpress1 CVE
  46. 1,296.gatsby-transformer-remark1 CVE
  47. 1,297.geddy1 CVE
  48. 1,298.gedi1 CVE
  49. 1,299.gemini-mcp-tool1 CVE
  50. 1,300.general-file-server1 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →