npm Package Vulnerabilities

All 2,691 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 5,630 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 2,251.serc.js1 CVE
  2. 2,252.@serenity-is/corelib1 CVE
  3. 2,253.serial-number1 CVE
  4. 2,254.serve461 CVE
  5. 2,255.serve-here.js1 CVE
  6. 2,256.serve-index1 CVE
  7. 2,257.serverabc1 CVE
  8. 2,258.serverhuwenhui1 CVE
  9. 2,259.serverless1 CVE
  10. 2,260.serverless-offline1 CVE
  11. 2,261.serverliujiayi11 CVE
  12. 2,262.serverlyr1 CVE
  13. 2,263.serverwg1 CVE
  14. 2,264.serverwzl1 CVE
  15. 2,265.serverxxx1 CVE
  16. 2,266.serveryaozeyan1 CVE
  17. 2,267.serveryztyzt1 CVE
  18. 2,268.serverzyy1 CVE
  19. 2,269.servey1 CVE
  20. 2,270.servify-express1 CVE
  21. 2,271.servst1 CVE
  22. 2,272.set-deep-prop1 CVE
  23. 2,273.set-getter1 CVE
  24. 2,274.set-object-value1 CVE
  25. 2,275.set-or-get1 CVE
  26. 2,276.sexstatic1 CVE
  27. 2,277.sey1 CVE
  28. 2,278.sfml1 CVE
  29. 2,279.sgqserve1 CVE
  30. 2,280.shadowsock1 CVE
  31. 2,281.sha.js1 CVE
  32. 2,282.shamefile1 CVE
  33. 2,283.sharp1 CVE
  34. 2,284.shave1 CVE
  35. 2,285.shelljs1 CVE
  36. 2,286.shenliru1 CVE
  37. 2,287.shit-server1 CVE
  38. 2,288.@shopify/hydrogen1 CVE
  39. 2,289.@shopify/koa-shopify-auth1 CVE
  40. 2,290.short-video-maker1 CVE
  41. 2,291.shout1 CVE
  42. 2,292.showdown1 CVE
  43. 2,293.shvl1 CVE
  44. 2,294.@sideway/formula1 CVE
  45. 2,295.@signalk/set-system-time1 CVE
  46. 2,296.sigstore1 CVE
  47. 2,297.@sigstore/core1 CVE
  48. 2,298.@sigstore/oci1 CVE
  49. 2,299.@sigstore/verify1 CVE
  50. 2,300.@simonsmith/cypress-image-snapshot1 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →