npm Package Vulnerabilities

All 2,689 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 5,615 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1,601.libnotify1 CVE
  2. 1,602.libp2p1 CVE
  3. 1,603.@libp2p/kad-dht1 CVE
  4. 1,604.libpq1 CVE
  5. 1,605.libsbml1 CVE
  6. 1,606.libsbmlsim1 CVE
  7. 1,607.libxl1 CVE
  8. 1,608.libyaml1 CVE
  9. 1,609.liferay-ckeditor1 CVE
  10. 1,610.lifion-verify-deps1 CVE
  11. 1,611.lightning-flow-scanner1 CVE
  12. 1,612.lightning-server1 CVE
  13. 1,613.lilconfig1 CVE
  14. 1,614.limbus-buildgen1 CVE
  15. 1,615.limdu1 CVE
  16. 1,616.line-desktop-mcp1 CVE
  17. 1,617.linkifyjs1 CVE
  18. 1,618.linux-cmdline1 CVE
  19. 1,619.@lionello/secp256k1-js1 CVE
  20. 1,620.list-n-stream1 CVE
  21. 1,621.lite-dev-server1 CVE
  22. 1,622.lite-server1 CVE
  23. 1,623.litespeed.js1 CVE
  24. 1,624.lite-web-server1 CVE
  25. 1,625.liuyaserver1 CVE
  26. 1,626.lix1 CVE
  27. 1,627.liyujing1 CVE
  28. 1,628.locize1 CVE
  29. 1,629.lockfile-lint-api1 CVE
  30. 1,630.lodahs1 CVE
  31. 1,631.lodash.defaultsdeep1 CVE
  32. 1,632.lodash.pick1 CVE
  33. 1,633.lodash.set1 CVE
  34. 1,634.lodash.setwith1 CVE
  35. 1,635.lodash.trim1 CVE
  36. 1,636.lodash.trimend1 CVE
  37. 1,637.lodash.update1 CVE
  38. 1,638.lodash.updatewith1 CVE
  39. 1,639.log4js1 CVE
  40. 1,640.logkitty1 CVE
  41. 1,641.loopback-connector-postgresql1 CVE
  42. 1,642.looppake1 CVE
  43. 1,643.lsof1 CVE
  44. 1,644.ltt1 CVE
  45. 1,645.@lumieducation/h5p-server1 CVE
  46. 1,646.lutils1 CVE
  47. 1,647.luxon1 CVE
  48. 1,648.macaca-chromedriver1 CVE
  49. 1,649.macaca-chromedriver-zxa1 CVE
  50. 1,650.macaddress1 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →