npm Package Vulnerabilities
All 2,689 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 5,615 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.
- 1,551.keep-module-latest1 CVE
- 1,552.kerberos1 CVE
- 1,553.keycloak-js1 CVE
- 1,554.@keycloak/keycloak-admin-client1 CVE
- 1,555.keypair1 CVE
- 1,556.@keystonejs/keystone1 CVE
- 1,557.@keystone-next/auth1 CVE
- 1,558.kibana1 CVE
- 1,559.kill-by-port1 CVE
- 1,560.killing1 CVE
- 1,561.killport1 CVE
- 1,562.kill-port1 CVE
- 1,563.kill-port-process1 CVE
- 1,564.kill-process-by-name1 CVE
- 1,565.kill-process-on-port1 CVE
- 1,566.@kilocode/cli1 CVE
- 1,567.kindlegen1 CVE
- 1,568.kind-of1 CVE
- 1,569.kiota-typescript1 CVE
- 1,570.kityminder1 CVE
- 1,571.klona1 CVE
- 1,572.knightjs1 CVE
- 1,573.@knight-lab/timelinejs1 CVE
- 1,574.knockout1 CVE
- 1,575.knwl.js1 CVE
- 1,576.@koa/cors1 CVE
- 1,577.koa-remove-trailing-slashes1 CVE
- 1,578.@koa/router1 CVE
- 1,579.kongadmin1 CVE
- 1,580.@kottster/server1 CVE
- 1,581.kubectl-mcp-server1 CVE
- 1,582.kurwov1 CVE
- 1,583.@kyivstarteam/react-native-sms-user-consent1 CVE
- 1,584.lab6.brit951 CVE
- 1,585.lab6drewfusbyu1 CVE
- 1,586.@lambda-middleware/json-deserializer1 CVE
- 1,587.@langchain/core1 CVE
- 1,588.@langchain/langgraph-checkpoint-mongodb1 CVE
- 1,589.@langchain/langgraph-checkpoint-redis1 CVE
- 1,590.larvitbase-api1 CVE
- 1,591.launchpad1 CVE
- 1,592.lazysizes1 CVE
- 1,593.ldapauth1 CVE
- 1,594.ldapauth-fork1 CVE
- 1,595.@leanprover/unicode-input-component1 CVE
- 1,596.lemonldap-ng-handler1 CVE
- 1,597.lessindex1 CVE
- 1,598.less-openui51 CVE
- 1,599.lettersanitizer1 CVE
- 1,600.libnmap1 CVE
Which npm packages run in YOUR stack?
EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.
Start Free Scan →