npm Package Vulnerabilities

All 2,957 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 7,177 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 401.send3 CVEs
  2. 402.@sentry/nextjs3 CVEs
  3. 403.@sequelize/core3 CVEs
  4. 404.set-in3 CVEs
  5. 405.showdown3 CVEs
  6. 406.simplehttpserver3 CVEs
  7. 407.simple-markdown3 CVEs
  8. 408.slpjs3 CVEs
  9. 409.slp-validate3 CVEs
  10. 410.socket.io3 CVEs
  11. 411.stimulsoft-dashboards-js3 CVEs
  12. 412.@strapi/core3 CVEs
  13. 413.@strapi/plugin-content-manager3 CVEs
  14. 414.@strapi/utils3 CVEs
  15. 415.@theia/ai-chat3 CVEs
  16. 416.@theia/ai-chat-ui3 CVEs
  17. 417.@theia/ai-claude-code3 CVEs
  18. 418.@theia/ai-code-completion3 CVEs
  19. 419.@theia/ai-core3 CVEs
  20. 420.@theia/ai-editor3 CVEs
  21. 421.tmp3 CVEs
  22. 422.tough-cookie3 CVEs
  23. 423.@typebot.io/js3 CVEs
  24. 424.uap-core3 CVEs
  25. 425.unhead3 CVEs
  26. 426.vitest3 CVEs
  27. 427.@vitest/mocker3 CVEs
  28. 428.@vrite/sdk3 CVEs
  29. 429.vuetify3 CVEs
  30. 430.@workos-inc/authkit-nextjs3 CVEs
  31. 431.xml-crypto3 CVEs
  32. 432.@zereight/mcp-gitlab3 CVEs
  33. 433.@actions/core2 CVEs
  34. 434.@adobe/css-tools2 CVEs
  35. 435.aedes2 CVEs
  36. 436.aegir2 CVEs
  37. 437.@agenticmail/api2 CVEs
  38. 438.@agenticmail/core2 CVEs
  39. 439.agents2 CVEs
  40. 440.ag-grid-community2 CVEs
  41. 441.ag-grid-enterprise2 CVEs
  42. 442.ajv2 CVEs
  43. 443.algoliasearch-helper2 CVEs
  44. 444.@anthropic-ai/sdk2 CVEs
  45. 445.apidoc-core2 CVEs
  46. 446.@apify/actors-mcp-server2 CVEs
  47. 447.@apollo/query-planner2 CVEs
  48. 448.@apostrophecms/form2 CVEs
  49. 449.app-builder-lib2 CVEs
  50. 450.@appium/support2 CVEs

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →