npm Package Vulnerabilities

All 2,957 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 7,177 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1,801.linkifyjs1 CVE
  2. 1,802.linux-cmdline1 CVE
  3. 1,803.@lionello/secp256k1-js1 CVE
  4. 1,804.list-n-stream1 CVE
  5. 1,805.lite-dev-server1 CVE
  6. 1,806.lite-server1 CVE
  7. 1,807.litespeed.js1 CVE
  8. 1,808.lite-web-server1 CVE
  9. 1,809.liuyaserver1 CVE
  10. 1,810.lix1 CVE
  11. 1,811.liyujing1 CVE
  12. 1,812.locize1 CVE
  13. 1,813.lockfile-lint-api1 CVE
  14. 1,814.lodahs1 CVE
  15. 1,815.lodash.defaultsdeep1 CVE
  16. 1,816.lodash.pick1 CVE
  17. 1,817.lodash.set1 CVE
  18. 1,818.lodash.setwith1 CVE
  19. 1,819.lodash-template1 CVE
  20. 1,820.lodash.trim1 CVE
  21. 1,821.lodash.trimend1 CVE
  22. 1,822.lodash.update1 CVE
  23. 1,823.lodash.updatewith1 CVE
  24. 1,824.log4js1 CVE
  25. 1,825.logkitty1 CVE
  26. 1,826.@logtape/syslog1 CVE
  27. 1,827.@logto/tunnel1 CVE
  28. 1,828.loopback-connector-postgresql1 CVE
  29. 1,829.looppake1 CVE
  30. 1,830.lsof1 CVE
  31. 1,831.ltt1 CVE
  32. 1,832.@lumieducation/h5p-server1 CVE
  33. 1,833.lutils1 CVE
  34. 1,834.luxon1 CVE
  35. 1,835.macaca-chromedriver1 CVE
  36. 1,836.macaca-chromedriver-zxa1 CVE
  37. 1,837.macaddress1 CVE
  38. 1,838.macfromip1 CVE
  39. 1,839.madge1 CVE
  40. 1,840.magix-combine-ex1 CVE
  41. 1,841.maildev1 CVE
  42. 1,842.mailparser1 CVE
  43. 1,843.makerjs1 CVE
  44. 1,844.mammoth1 CVE
  45. 1,845.manifest1 CVE
  46. 1,846.maplibre-gl1 CVE
  47. 1,847.mapshaper1 CVE
  48. 1,848.marionette-socket-host1 CVE
  49. 1,849.markdown-it-decorate1 CVE
  50. 1,850.markdown-it-highlightjs1 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →