npm Package Vulnerabilities

All 2,957 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 7,177 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 151.aaptjs6 CVEs
  2. 152.@aborruso/ckan-mcp-server6 CVEs
  3. 153.@backstage/backend-defaults6 CVEs
  4. 154.@budibase/backend-core6 CVEs
  5. 155.@frangoteam/fuxa6 CVEs
  6. 156.@grpc/grpc-js6 CVEs
  7. 157.hapi6 CVEs
  8. 158.@hono/node-server6 CVEs
  9. 159.@intlify/vue-i18n-core6 CVEs
  10. 160.joi6 CVEs
  11. 161.jsonata6 CVEs
  12. 162.katex6 CVEs
  13. 163.minimatch6 CVEs
  14. 164.music-metadata6 CVEs
  15. 165.node-opcua6 CVEs
  16. 166.openpgp6 CVEs
  17. 167.parse-url6 CVEs
  18. 168.petite-vue-i18n6 CVEs
  19. 169.prismjs6 CVEs
  20. 170.rsshub6 CVEs
  21. 171.serialize-javascript6 CVEs
  22. 172.@steipete/summarize6 CVEs
  23. 173.swagger-typescript-api6 CVEs
  24. 174.ua-parser-js6 CVEs
  25. 175.vue-i18n6 CVEs
  26. 176.ws6 CVEs
  27. 177.auth0-js5 CVEs
  28. 178.@backstage/plugin-catalog-backend5 CVEs
  29. 179.basic-ftp5 CVEs
  30. 180.bootstrap-sass5 CVEs
  31. 181.@builder.io/qwik5 CVEs
  32. 182.ckeditor55 CVEs
  33. 183.decompress5 CVEs
  34. 184.dojo5 CVEs
  35. 185.ejs5 CVEs
  36. 186.elysia5 CVEs
  37. 187.ep_etherpad-lite5 CVEs
  38. 188.express5 CVEs
  39. 189.froala-editor5 CVEs
  40. 190.generator-jhipster5 CVEs
  41. 191.@highcharts/grid-pro5 CVEs
  42. 192.http-proxy-middleware5 CVEs
  43. 193.@intlify/core5 CVEs
  44. 194.@intlify/core-base5 CVEs
  45. 195.keystone5 CVEs
  46. 196.koa5 CVEs
  47. 197.launch-editor5 CVEs
  48. 198.lodash-amd5 CVEs
  49. 199.magicmirror5 CVEs
  50. 200.mathjs5 CVEs

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →