npm Package Vulnerabilities
All 2,958 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 7,178 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.
- 2,851.vue1 CVE
- 2,852.@vue/cli-plugin-pwa1 CVE
- 2,853.@vuelidate/validators1 CVE
- 2,854.vue-storefront-api1 CVE
- 2,855.vue-template-compiler1 CVE
- 2,856.vulnogram1 CVE
- 2,857.vvvebjs1 CVE
- 2,858.vvvebJs1 CVE
- 2,859.@wakaru/cli1 CVE
- 2,860.@waline/vercel1 CVE
- 2,861.@wangeditor/editor1 CVE
- 2,862.wangguojing1231 CVE
- 2,863.wasdk1 CVE
- 2,864.waterline-sequel1 CVE
- 2,865.wazuh1 CVE
- 2,866.@wdio/browserstack-service1 CVE
- 2,867.weather.swlyons1 CVE
- 2,868.web3-core-method1 CVE
- 2,869.web3-core-subscriptions1 CVE
- 2,870.@web3-react/coinbase-wallet1 CVE
- 2,871.@web3-react/eip11931 CVE
- 2,872.@web3-react/metamask1 CVE
- 2,873.@web3-react/walletconnect1 CVE
- 2,874.web3-utils1 CVE
- 2,875.webcrack1 CVE
- 2,876.webdriver-launcher1 CVE
- 2,877.webdrvr1 CVE
- 2,878.webfinger.js1 CVE
- 2,879.@webiny/react-rich-text-renderer1 CVE
- 2,880.webmention.js1 CVE
- 2,881.web-node-server1 CVE
- 2,882.webpack-subresource-integrity1 CVE
- 2,883.@webrecorder/archivewebpage1 CVE
- 2,884.@webrecorder/wabac1 CVE
- 2,885.webrtc-native1 CVE
- 2,886.websocket-extensions1 CVE
- 2,887.webtorrent1 CVE
- 2,888.webui-aria21 CVE
- 2,889.welcomyzt1 CVE
- 2,890.wetty1 CVE
- 2,891.wffserve1 CVE
- 2,892.whatsapp-api-js1 CVE
- 2,893.whereis1 CVE
- 2,894.@whiskeysockets/baileys1 CVE
- 2,895.whispercast1 CVE
- 2,896.whois1 CVE
- 2,897.wifey1 CVE
- 2,898.wifiscanner1 CVE
- 2,899.willitmerge1 CVE
- 2,900.wincred1 CVE
Which npm packages run in YOUR stack?
EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.
Book a Demo →