npm Package Vulnerabilities

All 2,690 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 5,622 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 2,051.@pnpm/linux-x641 CVE
  2. 2,052.@pnpm/macos-arm641 CVE
  3. 2,053.@pnpm/macos-x641 CVE
  4. 2,054.@pnpm/win-x641 CVE
  5. 2,055.poco1 CVE
  6. 2,056.@podium/layout1 CVE
  7. 2,057.@podium/proxy1 CVE
  8. 2,058.pomelo1 CVE
  9. 2,059.pomelo-monitor1 CVE
  10. 2,060.pooledwebsocket1 CVE
  11. 2,061.@portkey-ai/gateway1 CVE
  12. 2,062.portkiller1 CVE
  13. 2,063.port-killer1 CVE
  14. 2,064.portprocesses1 CVE
  15. 2,065.posix1 CVE
  16. 2,066.posthog-js1 CVE
  17. 2,067.@posthog/plugin-server1 CVE
  18. 2,068.post-loader1 CVE
  19. 2,069.pouchdb1 CVE
  20. 2,070.@powersync/service-core1 CVE
  21. 2,071.@powersync/service-sync-rules1 CVE
  22. 2,072.preact1 CVE
  23. 2,073.prebid.js1 CVE
  24. 2,074.prebid-universal-creative1 CVE
  25. 2,075.prebuild-lwip1 CVE
  26. 2,076.predefine1 CVE
  27. 2,077.primefaces1 CVE
  28. 2,078.prince1 CVE
  29. 2,079.printer1 CVE
  30. 2,080.printf1 CVE
  31. 2,081.@prisma/sdk1 CVE
  32. 2,082.probot1 CVE
  33. 2,083.proctree1 CVE
  34. 2,084.product-monitor1 CVE
  35. 2,085.@progfay/scrapbox-parser1 CVE
  36. 2,086.progressbar.js1 CVE
  37. 2,087.projen1 CVE
  38. 2,088.promisehelpers1 CVE
  39. 2,089.promise-probe1 CVE
  40. 2,090.properties-reader1 CVE
  41. 2,091.property-expr1 CVE
  42. 2,092.Proto1 CVE
  43. 2,093.@protobufjs/utf81 CVE
  44. 2,094.protocol-buffers-schema1 CVE
  45. 2,095.proxy1 CVE
  46. 2,096.proxy.js1 CVE
  47. 2,097.ps1 CVE
  48. 2,098.ps-kill1 CVE
  49. 2,099.psnode1 CVE
  50. 2,100.ps-visitor1 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →