npm Package Vulnerabilities
All 2,666 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 5,508 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.
- 301.slp-validate3 CVEs
- 302.sm-crypto3 CVEs
- 303.snowflake-sdk3 CVEs
- 304.socket.io3 CVEs
- 305.stimulsoft-dashboards-js3 CVEs
- 306.@strapi/core3 CVEs
- 307.@strapi/plugin-content-manager3 CVEs
- 308.@strapi/utils3 CVEs
- 309.@theia/ai-chat3 CVEs
- 310.@theia/ai-chat-ui3 CVEs
- 311.@theia/ai-claude-code3 CVEs
- 312.@theia/ai-code-completion3 CVEs
- 313.@theia/ai-core3 CVEs
- 314.@theia/ai-editor3 CVEs
- 315.tinacms3 CVEs
- 316.tmp3 CVEs
- 317.tough-cookie3 CVEs
- 318.@typebot.io/js3 CVEs
- 319.typeorm3 CVEs
- 320.uap-core3 CVEs
- 321.@vitest/browser3 CVEs
- 322.@vrite/sdk3 CVEs
- 323.vuetify3 CVEs
- 324.@workos-inc/authkit-nextjs3 CVEs
- 325.xml-crypto3 CVEs
- 326.yapi-vendor3 CVEs
- 327.@actions/core2 CVEs
- 328.adm-zip2 CVEs
- 329.@adobe/css-tools2 CVEs
- 330.aedes2 CVEs
- 331.aegir2 CVEs
- 332.@agenticmail/api2 CVEs
- 333.agents2 CVEs
- 334.ag-grid-community2 CVEs
- 335.ag-grid-enterprise2 CVEs
- 336.ajv2 CVEs
- 337.algoliasearch-helper2 CVEs
- 338.@anthropic-ai/sdk2 CVEs
- 339.apidoc-core2 CVEs
- 340.@apollo/query-planner2 CVEs
- 341.assign-deep2 CVEs
- 342.@astrojs/cloudflare2 CVEs
- 343.async-git2 CVEs
- 344.aws-cdk2 CVEs
- 345.@backstage/backend-defaults2 CVEs
- 346.@backstage/plugin-auth-backend2 CVEs
- 347.@backstage/plugin-catalog-backend2 CVEs
- 348.@backstage/plugin-scaffolder-node2 CVEs
- 349.@backstage/plugin-techdocs-backend2 CVEs
- 350.@backstage/plugin-techdocs-node2 CVEs
Which npm packages run in YOUR stack?
EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.
Start Free Scan →