npm Package Vulnerabilities
All 2,693 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 5,655 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.
- 2,351.sspa1 CVE
- 2,352.ssrf-agent1 CVE
- 2,353.stage-js1 CVE
- 2,354.starkbank-ecdsa1 CVE
- 2,355.startserver1 CVE
- 2,356.static-dev-server1 CVE
- 2,357.static-eval1 CVE
- 2,358.static-html-server1 CVE
- 2,359.statichttpserver1 CVE
- 2,360.static-resource-server1 CVE
- 2,361.static-server1 CVE
- 2,362.stattic1 CVE
- 2,363.stellar-sdk1 CVE
- 2,364.steroids1 CVE
- 2,365.stimulus_reflex1 CVE
- 2,366.@stoqey/gnuplot1 CVE
- 2,367.store21 CVE
- 2,368.storefront-api1 CVE
- 2,369.strapi-admin1 CVE
- 2,370.@strapi/content-type-builder1 CVE
- 2,371.strapi-plugin-content-manager1 CVE
- 2,372.@strapi/plugin-content-type-builder1 CVE
- 2,373.strapi-plugin-content-type-builder1 CVE
- 2,374.@strapi/plugin-email1 CVE
- 2,375.strapi-plugin-protected-populate1 CVE
- 2,376.@strapi/plugin-upload1 CVE
- 2,377.@strapi/upload1 CVE
- 2,378.@striae-org/striae1 CVE
- 2,379.strider-sauce1 CVE
- 2,380.string1 CVE
- 2,381.string-kit1 CVE
- 2,382.string-math1 CVE
- 2,383.stringstream1 CVE
- 2,384.striptags1 CVE
- 2,385.strong-nginx-controller1 CVE
- 2,386.@stryker-mutator/util1 CVE
- 2,387.studiocms1 CVE
- 2,388.sublinear-time-solver1 CVE
- 2,389.summit1 CVE
- 2,390.@sunwood-ai-labs/github-kanban-mcp-server1 CVE
- 2,391.@supabase/auth-js1 CVE
- 2,392.superagent1 CVE
- 2,393.superjson1 CVE
- 2,394.supermixer1 CVE
- 2,395.survey-creator1 CVE
- 2,396.susu-sum1 CVE
- 2,397.svelecte1 CVE
- 2,398.@sveltejs/adapter-vercel1 CVE
- 2,399.sveltekit-superforms1 CVE
- 2,400.svg2png1 CVE
Which npm packages run in YOUR stack?
EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.
Start Free Scan →