npm Package Vulnerabilities

All 2,689 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 5,615 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1,401.heroku-addonpool1 CVE
  2. 1,402.heroku-env1 CVE
  3. 1,403.hexo-admin1 CVE
  4. 1,404.hexo-theme-anzhiyu1 CVE
  5. 1,405.@hey-api/openapi-ts1 CVE
  6. 1,406.hfs1 CVE
  7. 1,407.hftp1 CVE
  8. 1,408.highlight.js1 CVE
  9. 1,409.highlight.run1 CVE
  10. 1,410.hoolock1 CVE
  11. 1,411.@hoppscotch/cli1 CVE
  12. 1,412.hosted-git-info1 CVE
  13. 1,413.hostr1 CVE
  14. 1,414.hot-formula-parser1 CVE
  15. 1,415.@hotwired/turbo1 CVE
  16. 1,416.@hpke/core1 CVE
  17. 1,417.html2pdf.js1 CVE
  18. 1,418.html-minifier1 CVE
  19. 1,419.html-parse-stringify1 CVE
  20. 1,420.html-parse-stringify21 CVE
  21. 1,421.html-pdf1 CVE
  22. 1,422.http-cache-semantics1 CVE
  23. 1,423.http-proxy1 CVE
  24. 1,424.http-proxy-agent1 CVE
  25. 1,425.http-proxy.js1 CVE
  26. 1,426.http_server1 CVE
  27. 1,427.http-server-node1 CVE
  28. 1,428.http-signature1 CVE
  29. 1,429.https-proxy-agent1 CVE
  30. 1,430.http_static_simple1 CVE
  31. 1,431.httpster1 CVE
  32. 1,432.httpsync1 CVE
  33. 1,433.hubl-server1 CVE
  34. 1,434.hubot-scripts1 CVE
  35. 1,435.@hulumi/drift1 CVE
  36. 1,436.hydrooj1 CVE
  37. 1,437.i1 CVE
  38. 1,438.i18next-http-backend1 CVE
  39. 1,439.i18nextify1 CVE
  40. 1,440.i18next-locize-backend1 CVE
  41. 1,441.i18n-node-angular1 CVE
  42. 1,442.@ianwalter/merge1 CVE
  43. 1,443.ibapi1 CVE
  44. 1,444.ibm_db1 CVE
  45. 1,445.iedriver1 CVE
  46. 1,446.@ifnotnowwhen/promptr1 CVE
  47. 1,447.igniteui1 CVE
  48. 1,448.ikst1 CVE
  49. 1,449.imageoptim1 CVE
  50. 1,450.images1 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →