npm Package Vulnerabilities

All 2,689 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 5,615 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1,701.merge-options1 CVE
  2. 1,702.merge-recursive1 CVE
  3. 1,703.@meshconnect/web-link-sdk1 CVE
  4. 1,704.messageformat1 CVE
  5. 1,705.@messageformat/runtime1 CVE
  6. 1,706.metacalc1 CVE
  7. 1,707.metascraper1 CVE
  8. 1,708.meteor1 CVE
  9. 1,709.method-override1 CVE
  10. 1,710.metro41 CVE
  11. 1,711.mfrs1 CVE
  12. 1,712.mfrserver1 CVE
  13. 1,713.micromatch1 CVE
  14. 1,714.@microsoft/kiota-http-fetchlibrary1 CVE
  15. 1,715.@mikro-orm/knex1 CVE
  16. 1,716.@mikro-orm/sql1 CVE
  17. 1,717.mime1 CVE
  18. 1,718.min-dash1 CVE
  19. 1,719.mind-elixir1 CVE
  20. 1,720.min-document1 CVE
  21. 1,721.min-http-server1 CVE
  22. 1,722.miniflare1 CVE
  23. 1,723.@misskey-dev/summaly1 CVE
  24. 1,724.mixme1 CVE
  25. 1,725.mobiledoc-kit1 CVE
  26. 1,726.@mobilenext/mobile-mcp1 CVE
  27. 1,727.mock2easy1 CVE
  28. 1,728.mockery1 CVE
  29. 1,729.mockjs1 CVE
  30. 1,730.@mockoon/cli1 CVE
  31. 1,731.@mockoon/commons-server1 CVE
  32. 1,732.mockserve1 CVE
  33. 1,733.modern-async1 CVE
  34. 1,734.module-from-string1 CVE
  35. 1,735.mojic1 CVE
  36. 1,736.mongodb1 CVE
  37. 1,737.mongodb-client-encryption1 CVE
  38. 1,738.mongodb-instance1 CVE
  39. 1,739.@mongodb-js/connection-form1 CVE
  40. 1,740.mongodb-query-parser1 CVE
  41. 1,741.mongose1 CVE
  42. 1,742.monorepo-build1 CVE
  43. 1,743.mootools-more1 CVE
  44. 1,744.morgan-json1 CVE
  45. 1,745.morris.js1 CVE
  46. 1,746.mosc1 CVE
  47. 1,747.mosca1 CVE
  48. 1,748.mpregular1 CVE
  49. 1,749.mqtt1 CVE
  50. 1,750.mquery1 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →