npm Package Vulnerabilities

All 2,957 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 7,177 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 2,001.@nocobase/plugin-backups1 CVE
  2. 2,002.@nocobase/plugin-notification-in-app-message1 CVE
  3. 2,003.@nocobase/plugin-workflow-javascript1 CVE
  4. 2,004.@nocobase/plugin-workflow-request1 CVE
  5. 2,005.@nocobase/plugin-workflow-sql1 CVE
  6. 2,006.nodeaaaaa1 CVE
  7. 2,007.node-air-sdk1 CVE
  8. 2,008.nodebatis1 CVE
  9. 2,009.nodebb-plugin-blog-comments1 CVE
  10. 2,010.nodebb-plugin-markdown1 CVE
  11. 2,011.node-bluetooth1 CVE
  12. 2,012.node-bluetooth-serial-port1 CVE
  13. 2,013.node-browser1 CVE
  14. 2,014.node-bsdiff-android1 CVE
  15. 2,015.nodecaffe1 CVE
  16. 2,016.node-code-sandbox-mcp1 CVE
  17. 2,017.node-cube1 CVE
  18. 2,018.node-df1 CVE
  19. 2,019.node-email-check1 CVE
  20. 2,020.node-etsy-client1 CVE
  21. 2,021.nodee-utils1 CVE
  22. 2,022.node-extend1 CVE
  23. 2,023.node.extend1 CVE
  24. 2,024.nodefabric1 CVE
  25. 2,025.node-fabric1 CVE
  26. 2,026.nodeffmpeg1 CVE
  27. 2,027.node-gettext1 CVE
  28. 2,028.node-import1 CVE
  29. 2,029.node-ipc1 CVE
  30. 2,030.node-json2html1 CVE
  31. 2,031.nodejs-whisper1 CVE
  32. 2,032.node-key-sender1 CVE
  33. 2,033.node-latex-pdf1 CVE
  34. 2,034.node-lmdb1 CVE
  35. 2,035.nodemailer-js1 CVE
  36. 2,036.nodemailer.js1 CVE
  37. 2,037.node-mpv1 CVE
  38. 2,038.nodemssql1 CVE
  39. 2,039.node-notifier1 CVE
  40. 2,040.@node-oauth/oauth2-server1 CVE
  41. 2,041.node-oojs1 CVE
  42. 2,042.node-opcua-alarm-condition1 CVE
  43. 2,043.node-opcua-client1 CVE
  44. 2,044.node-opcua-transport1 CVE
  45. 2,045.node-opencv1 CVE
  46. 2,046.node-opensl1 CVE
  47. 2,047.node-openssl1 CVE
  48. 2,048.node-pdf-generator1 CVE
  49. 2,049.node-prompt-here1 CVE
  50. 2,050.node-ps1 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →