Package ecosystem
npm package vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 7,030 vulnerabilities in npm packages: 32 in the last 7 days and 929 in the last 90 days, 348 of them critical and 11 exploited in the wild. The most recent, CVE-2026-128065, was published on 13 November 2026. 262 vulnerabilities in the last four weeks, down 37% on the four before (415). 18 critical against 69. 472 packages have a page of their own.
- Last 7 days
- 32
- Last 90 days
- 929
- Critical, all time
- 348
- Exploited in the wild
- 11
About npm
npm is a package manager and registry for JavaScript and Node.js packages.
npm packages
- openclaw (npm)214
- flowise (npm)133
- parse-server (npm)117
- vm2 (npm)111
- electron (npm)77
- ghost (npm)74
- n8n (npm)64
- hono (npm)62
- directus (npm)61
- nocodb (npm)54
- undici (npm)53
- @budibase/server (npm)42
- apostrophe (npm)36
- dompurify (npm)36
- node-forge (npm)36
- flowise-components (npm)33
- astro (npm)31
- pnpm (npm)31
- @anthropic-ai/claude-code (npm)30
- axios (npm)29
- nuxt (npm)29
- payload (npm)29
- better-auth (npm)28
- next (npm)26
- 9router (npm)24
- mongoose (npm)24
- tinymce (npm)24
- @xmldom/xmldom (npm)23
- fuxa-server (npm)22
- renovate (npm)21
- @sveltejs/kit (npm)21
- @openzeppelin/contracts-upgradeable (npm)20
- electerm (npm)19
- liquidjs (npm)19
- sequelize (npm)19
- xmldom (npm)19
- @openzeppelin/contracts (npm)18
- @backstage/plugin-scaffolder-backend (npm)17
- fastify (npm)17
- fast-uri (npm)17
- handlebars (npm)17
- marked (npm)17
- nodemailer (npm)17
- tar (npm)17
- protobufjs (npm)17
- sanitize-html (npm)17
- signalk-server (npm)17
- systeminformation (npm)17
- devalue (npm)16
- @haxtheweb/haxcms-nodejs (npm)16
- mermaid (npm)16
- angular (npm)15
- ckeditor4 (npm)15
- jspdf (npm)15
- multer (npm)15
- fast-jwt (npm)14
- jsrsasign (npm)14
- @nyariv/sandboxjs (npm)14
- shescape (npm)14
- svelte (npm)14
- swagger-ui (npm)14
- @directus/api (npm)13
- fast-xml-parser (npm)13
- next-auth (npm)13
- seroval (npm)13
- strapi (npm)13
- vite-plus (npm)13
- @angular/platform-server (npm)12
- bootstrap (npm)12
- clawdbot (npm)12
- @evershop/evershop (npm)12
- js-yaml (npm)12
- matrix-js-sdk (npm)12
- npm (npm)12
- orval (npm)12
- uptime-kuma (npm)12
- adm-zip (npm)11
- h3 (npm)11
- @lobehub/chat (npm)11
- n8n-mcp (npm)11
- validator (npm)11
- @oneuptime/common (npm)11
- sillytavern (npm)11
- @strapi/strapi (npm)11
- @apostrophecms/import-export (npm)10
- brace-expansion (npm)10
- highcharts (npm)10
- ip-address (npm)10
- @backstage/plugin-techdocs-node (npm)10
- open-webui (npm)10
- trigger.dev (npm)10
- simple-git (npm)10
- @angular/core (npm)9
- @astrojs/node (npm)9
- elliptic (npm)9
- @hono/node-server (npm)9
- lodash (npm)9
- matrix-appservice-irc (npm)9
- @modelcontextprotocol/sdk (npm)9
- praisonai (npm)9
- serve (npm)9
- @tinacms/cli (npm)9
- @actual-app/sync-server (npm)8
- apollo-server (npm)8
- aws-cdk-lib (npm)8
- basic-ftp (npm)8
- @builder.io/qwik-city (npm)8
- editor.md (npm)8
- express-cart (npm)8
- follow-redirects (npm)8
- hapi (npm)8
- happy-dom (npm)8
- jquery-ui (npm)8
- @keystone-6/core (npm)8
- locutus (npm)8
- matrix-react-sdk (npm)8
- msgpack5 (npm)8
- @paperclipai/server (npm)8
- react-server-dom-parcel (npm)8
- react-server-dom-turbopack (npm)8
- react-server-dom-webpack (npm)8
- serialize-javascript (npm)8
- steal (npm)8
- @strapi/plugin-users-permissions (npm)8
- tarteaucitronjs (npm)8
- trix (npm)8
- urijs (npm)8
- url-parse (npm)8
- vega (npm)8
- ws (npm)8
- @aborruso/ckan-mcp-server (npm)7
- @angular/compiler (npm)7
- @angular/ssr (npm)7
- @asymmetric-effort/specifyjs (npm)7
- @auth0/nextjs-auth0 (npm)7
- bootstrap-sass (npm)7
- budibase (npm)7
- engine.io (npm)7
- generator-jhipster (npm)7
- hermes-engine (npm)7
- @highcharts/dashboards (npm)7
- @hulumi/policies (npm)7
- jodit (npm)7
- joi (npm)7
- lodash-es (npm)7
- lunary (npm)7
- markdown-it (npm)7
- mysql2 (npm)7
- node-opcua (npm)7
- mariadb (npm)7
- network-ai (npm)7
- obsidian-tc (npm)7
- postcss (npm)7
- @saltcorn/server (npm)7
- snyk-broker (npm)7
- studiocms (npm)7
- @sync-in/server (npm)7
- total.js (npm)7
- ua-parser-js (npm)7
- @vendure/core (npm)7
- @vitejs/plugin-rsc (npm)7
- webpack-dev-server (npm)7
- aaptjs (npm)6
- @budibase/backend-core (npm)6
- ep_etherpad-lite (npm)6
- @evomap/evolver (npm)6
- @fastify/static (npm)6
- @frangoteam/fuxa (npm)6
- @grpc/grpc-js (npm)6
- @intlify/vue-i18n-core (npm)6
- katex (npm)6
- mcp-server-kubernetes (npm)6
- minimatch (npm)6
- music-metadata (npm)6
- @angular/common (npm)6
- keystone (npm)6
- nuxt-og-image (npm)6
- openpgp (npm)6
- parse-url (npm)6
- passport-wsfed-saml2 (npm)6
- petite-vue-i18n (npm)6
- prismjs (npm)6
- quill (npm)6
- rsshub (npm)6
- safe-eval (npm)6
- @steipete/summarize (npm)6
- swagger-typescript-api (npm)6
- typeorm (npm)6
- unleash-server (npm)6
- @vitest/browser (npm)6
- vue-i18n (npm)6
- apollo-server-core (npm)5
- auth0-js (npm)5
- @backstage/backend-defaults (npm)5
- @backstage/plugin-catalog-backend (npm)5
- @builder.io/qwik (npm)5
- ckeditor5 (npm)5
- convict (npm)5
- dns-sync (npm)5
- dojo (npm)5
- ecstatic (npm)5
- ejs (npm)5
- exceljs (npm)5
- froala-editor (npm)5
- glance (npm)5
- @grackle-ai/server (npm)5
- @highcharts/grid-pro (npm)5
- http-proxy-middleware (npm)5
- i18next-http-backend (npm)5
- @intlify/core (npm)5
- @intlify/core-base (npm)5
- isomorphic-git (npm)5
- jsonwebtoken (npm)5
- mathjs (npm)5
- mcp-searxng (npm)5
- muhammara (npm)5
- nanoid (npm)5
- @nestjs/platform-fastify (npm)5
- decompress (npm)5
- elysia (npm)5
- joplin (npm)5
- magicmirror (npm)5
- @quasar/app-vite (npm)5
- path-to-regexp (npm)5
- @perfood/couch-auth (npm)5
- public (npm)5
- rendertron (npm)5
- safer-eval (npm)5
- @samanhappy/mcphub (npm)5
- @sequelize/core (npm)5
- shell-quote (npm)5
- snowflake-sdk (npm)5
- @strapi/admin (npm)5
- sweetalert2 (npm)5
- tinacms (npm)5
- @tinacms/graphql (npm)5
- toml (npm)5
- total4 (npm)5
- vditor (npm)5
- vega-functions (npm)5
- xlsx (npm)5
- yarn (npm)5
- @apollo/gateway (npm)4
- auth0-lock (npm)4
- aws-iot-device-sdk-v2 (npm)4
- @backstage/plugin-auth-backend (npm)4
- @backstage/plugin-techdocs-backend (npm)4
- bestzip (npm)4
- @better-auth/oauth-provider (npm)4
- braces (npm)4
- @clerk/nextjs (npm)4
- @cloudflare/workers-oauth-provider (npm)4
- code-server (npm)4
- convert-svg-core (npm)4
- @dynatrace-oss/dynatrace-mcp-server (npm)4
- @earendil-works/pi-coding-agent (npm)4
- erxes (npm)4
- express-xss-sanitizer (npm)4
- @fastify/middie (npm)4
- @fastify/reply-from (npm)4
- @feathersjs/authentication-oauth (npm)4
- @finos/git-proxy (npm)4
- @hapi/content (npm)4
- hummus (npm)4
- i18next-http-middleware (npm)4
- is-my-json-valid (npm)4
- jquery-validation (npm)4
- kysely (npm)4
- LangSmith (npm)4
- libxmljs (npm)4
- materialize-css (npm)4
- mercurius (npm)4
- @modelcontextprotocol/server (npm)4
- mongosh (npm)4
- node-saml (npm)4
- @node-saml/node-saml (npm)4
- exifreader (npm)4
- jsonata (npm)4
- launch-editor (npm)4
- moment (npm)4
- mongo-express (npm)4
- morgan (npm)4
- mppx (npm)4
- re2 (npm)4
- storybook (npm)4
- @nuxt/nitro-server (npm)4
- @nuxt/vite-builder (npm)4
- parse-dashboard (npm)4
- @payloadcms/next (npm)4
- protobufjs-cli (npm)4
- psitransfer (npm)4
- quasar (npm)4
- realms-shim (npm)4
- remarkable (npm)4
- repomix (npm)4
- sails (npm)4
- @sap/approuter (npm)4
- @sentry/nextjs (npm)4
- ses (npm)4
- showdown (npm)4
- simple-markdown (npm)4
- simplehttpserver (npm)4
- sm-crypto (npm)4
- smol-toml (npm)4
- snyk (npm)4
- @strapi/plugin-content-manager (npm)4
- stream-json (npm)4
- tar-fs (npm)4
- unhead (npm)4
- @uppy/companion (npm)4
- valine (npm)4
- webpack (npm)4
- wrangler (npm)4
- xdlocalstorage (npm)4
- xml-crypto (npm)4
- yapi-vendor (npm)4
- @zereight/mcp-gitlab (npm)4
- actual (npm)3
- @adonisjs/http-server (npm)3
- aedes (npm)3
- agnai (npm)3
- @angular/router (npm)3
- @angular/service-worker (npm)3
- @astrojs/netlify (npm)3
- @auth/core (npm)3
- @backstage/plugin-kubernetes-backend (npm)3
- @backstage/techdocs-common (npm)3
- bin-links (npm)3
- blamer (npm)3
- browserify-shim (npm)3
- browserslist (npm)3
- bson (npm)3
- buttle (npm)3
- @bytebase/dbhub (npm)3
- @clerk/astro (npm)3
- @clerk/backend (npm)3
- @clerk/express (npm)3
- @clerk/fastify (npm)3
- @clerk/nuxt (npm)3
- codecov (npm)3
- @commercial/subtext (npm)3
- crypto-js (npm)3
- @cubejs-backend/api-gateway (npm)3
- @cyclonedx/cdxgen (npm)3
- debug (npm)3
- docsify (npm)3
- dojox (npm)3
- dot (npm)3
- dset (npm)3
- effect (npm)3
- @enspirit/elo (npm)3
- esbuild (npm)3
- @excalidraw/excalidraw (npm)3
- express-fileupload (npm)3
- @fastify/express (npm)3
- feathers-sequelize (npm)3
- @fedify/fedify (npm)3
- file-type (npm)3
- find-my-way (npm)3
- @frontmcp/adapters (npm)3
- ftp-srv (npm)3
- gnuplot (npm)3
- @graphql-tools/executor-legacy-ws (npm)3
- @grpc/grpc-js-xds (npm)3
- grunt (npm)3
- harp (npm)3
- hekto (npm)3
- http-live-simulator (npm)3
- https-proxy-agent (npm)3
- @hulumi/baseline (npm)3
- ids-enterprise (npm)3
- image-size (npm)3
- immer (npm)3
- immutable (npm)3
- @janhq/core (npm)3
- @jmondi/url-to-png (npm)3
- jointjs (npm)3
- jose-node-cjs-runtime (npm)3
- jose-node-esm-runtime (npm)3
- jquery-file-upload (npm)3
- json-ptr (npm)3
- jsondiffpatch (npm)3
- jwt-simple (npm)3
- keycloak-connect (npm)3
- knex (npm)3
- @langchain/community (npm)3
- layui (npm)3
- @libp2p/gossipsub (npm)3
- llhttp (npm)3
- @lobehub/lobehub (npm)3
- localhost-now (npm)3
- lodash.defaultsdeep (npm)3
- m-server (npm)3
- mailgen (npm)3
- @mariozechner/pi-coding-agent (npm)3
- @materializecss/materialize (npm)3
- mathlive (npm)3
- mcp-markdownify-server (npm)3
- minimist (npm)3
- mxgraph (npm)3
- nadesiko3 (npm)3
- next-intl (npm)3
- @nguniversal/common (npm)3
- node-fetch (npm)3
- node-ipc (npm)3
- node-jose (npm)3
- node-red-dashboard (npm)3
- notevil (npm)3
- cline (npm)3
- decode-uri-component (npm)3
- @fastify/busboy (npm)3
- js-toml (npm)3
- knowns (npm)3
- koa (npm)3
- multiparty (npm)3
- mysql (npm)3
- nx (npm)3
- @tsparticles/mcp-server (npm)3
- @nuxt/devtools (npm)3
- @nuxt/rspack-builder (npm)3
- @nuxt/webpack-builder (npm)3
- @nuxtjs/mdc (npm)3
- object-path (npm)3
- opencc (npm)3
- openclaude (npm)3
- @openclaw/feishu (npm)3
- openmct (npm)3
- parse (npm)3
- parsel (npm)3
- passport-saml (npm)3
- @payloadcms/graphql (npm)3
- pbkdf2 (npm)3
- pdf-image (npm)3
- @pdfme/schemas (npm)3
- raneto (npm)3
- @remix-run/server-runtime (npm)3
- request (npm)3
- rollbar (npm)3
- samlify (npm)3
- @sentry/astro (npm)3
- serialize-to-js (npm)3
- set-in (npm)3
- @siteboon/claude-code-ui (npm)3
- slp-validate (npm)3
- slpjs (npm)3
- socket.io (npm)3
- socket.io-file (npm)3
- socket.io-parser (npm)3
- @soketi/soketi (npm)3
- static-eval (npm)3
- statics-server (npm)3
- stimulsoft-dashboards-js (npm)3
- @strapi/core (npm)3
- @strapi/utils (npm)3
- @tanstack/start-server-core (npm)3
- @theia/ai-chat (npm)3
- @theia/ai-chat-ui (npm)3
- @theia/ai-claude-code (npm)3
- @theia/ai-code-completion (npm)3
- @theia/ai-core (npm)3
- @theia/ai-editor (npm)3
- tmp (npm)3
- tough-cookie (npm)3
- tree-kill (npm)3
- @typebot.io/js (npm)3
- uap-core (npm)3
- uglify-js (npm)3
- uri-js (npm)3
- @vitest/mocker (npm)3
- @vrite/sdk (npm)3
- vuetify (npm)3
- @workos-inc/authkit-nextjs (npm)3
Latest npm package vulnerabilities
- CVE-2026-128065: grpc-js-xds RBAC override policy bypassmediumCVSS 4
- CVE-2026-126367: @grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Before 1.13.2, and…mediumCVSS 4.8
- CVE-2026-126363: Astro @astrojs/solid-js HTML injection in slot namesmediumCVSS 4
- CVE-2026-126362: Astro @astrojs/svelte renderer HTML injection via unescaped slot namesmediumCVSS 4
- CVE-2026-126359: Hono: `css` helper does not escape a closing tag split between the template and an interpolated value, allowing HTML…lowCVSS 3.4
- CVE-2026-126358: Hono RegExpRouter middleware bypass via wildcard matchingmediumCVSS 5.3
- CVE-2026-126357: Hono mount() path traversal bypasses middleware scopingmediumCVSS 5.3
- CVE-2026-126356: Hono validator form multipart/form-data parameter bypassmediumCVSS 5.3
- CVE-2026-126355: Hono csrf() middleware bypass via hyperlink auditingmediumCVSS 5.3
- CVE-2026-126346: basic-ftp unhandled exception in control socket event handlermediumCVSS 5.9
- CVE-2026-126345: basic-ftp MLSD parser prototype pollutionmediumCVSS 5.3
- CVE-2026-126343: @hono/node-server WebSocket ECONNRESET denial of servicemediumCVSS 5.3
- CVE-2026-126210: @hono/node-server path traversal via backslash bypassmediumCVSS 5.3
- Signal K Server buffered logs exposure in unauthenticated WebSocketmediumCVSS 5.3
- CVE-2026-127109: promzard code injection in template-loading via unescaped context property namesinfo
- CVE-2026-126187: React Server Components remote code execution via deserializationcriticalCVSS 4
- CVE-2026-126066: fast-xml-parser: Quadratic CPU consumption scanning unterminated stop-node tagslowCVSS 3.7
- CVE-2026-125335: Forge: Ed25519 signature verification accepts small-order public keyslowCVSS 3.7
- CVE-2026-125334: Forge TLS client crash on handshake record without sessionmediumCVSS 5.9
- CVE-2026-125333: Forge HTTP ReDoS in response header parsingmediumCVSS 5.9
- CVE-2026-125332: Forge TLS client crash on unsupported ServerHello compressionmediumCVSS 5.9
- CVE-2026-120792: .NET Aspire sensitive information insertion in log filehighCVSS 7.3
- CVE-2026-120778: .NET Aspire insecure temporary file creation local privilege escalationhighCVSS 7.3
- CVE-2026-79914: NocoBase server-side request forgery in customRequests:sendmediumCVSS 4.3
- CVE-2026-119192: Forge RSA PKCS#1 v1.5 signature forgery via non-canonical DigestInfo encodinghighCVSS 7.5
Most severe npm package vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2025-55182: React Server Components are Vulnerable to RCEcriticalexploited in the wildCVSS 10EPSS 99.8%
- CVE-2025-68613: n8n Vulnerable to Remote Code Execution via Expression Injectioncriticalexploited in the wildCVSS 9.9EPSS 99.0%
- CVE-2026-45321: TanStack npm packages supply chain compromise via GitHub Actions OIDC hijackingcriticalexploited in the wildCVSS 9.6EPSS 1.1%
- CVE-2023-4863: RUSTSEC-2023-0060 - libwebp: OOB write in BuildHuffmanTablecriticalexploited in the wildCVSS 3.1EPSS 100.0%
- CVE-2019-10758: mongo-express remote code execution in index creationcriticalexploited in the wildCVSS 3.1EPSS 84.7%
- CVE-2023-5217: Electron heap buffer overflow in libvpx vp8 encodingcriticalexploited in the wildCVSS 3.1EPSS 49.0%
- CVE-2022-4135: Google Chrome heap buffer overflow in GPUcriticalexploited in the wildCVSS 3.1EPSS 31.9%
- CVE-2025-54313: eslint-config-prettier, eslint-plugin-prettier, synckit, @pkgr/core, napi-postinstall have embedded malicious codecriticalexploited in the wildCVSS 3.1EPSS 4.5%
- CVE-2023-22894: Strapi information disclosure via private field filteringcriticalexploited in the wildCVSS 3.1EPSS 1.7%
- CVE-2021-21315: System Information Library for Node.JS Command Injectioncriticalexploited in the wildCVSS 3.1
Vulnerabilities per week
262 vulnerabilities in the last four weeks, down 37% on the four before (415). 18 critical against 69. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 63 | 16 | |
| 24 Aug 2026 | 31 | 1 | |
| 31 Aug 2026 | 89 | 6 | |
| 7 Sep 2026 | 39 | 3 | |
| 14 Sep 2026 | 132 | 43 | |
| 21 Sep 2026 | 40 | 5 | |
| 28 Sep 2026 | 105 | 9 | |
| 5 Oct 2026 | 138 | 12 | |
| 12 Oct 2026 | 45 | 6 | |
| 19 Oct 2026 | 109 | 6 | |
| 26 Oct 2026 | 79 | 1 | |
| 2 Nov 2026 | 29 | 5 | |
| 9 Nov 2026 | 30 | 2 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many npm package vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/vendors/npm)<a href="https://junglewise.ai/threats/vendors/npm"><img src="https://junglewise.ai/threats/vendors/npm/badge.svg" alt="npm package vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/vendors/npm.json, and this page as text at https://junglewise.ai/threats/vendors/npm.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "npm package vulnerabilities", https://junglewise.ai/threats/vendors/npm, 13 November 2026.