JavaScript (npm) vulnerabilities
7,537 vulnerabilities and 222,569 malicious packages in JavaScript (npm). openclaw has the most reviewed advisories.
Most exploited JavaScript (npm) vulnerabilities
- CVE-2025-68613 n8n Improper Control of Dynamically-Managed Code Resources
- CVE-2025-55182 Meta React Server Components Remote Code Execution
- CVE-2019-10758 MongoDB mongo-express Remote Code Execution
- CVE-2025-11953 React Native Community CLI OS Command Injection
- CVE-2026-45321 TanStack Unspecified
- CVE-2022-4135 Google Chromium GPU Heap Buffer Overflow
- CVE-2023-5217 Google Chromium libvpx Heap Buffer Overflow
- CVE-2023-4863 Google Chromium WebP Heap-Based Buffer Overflow
- CVE-2025-54313 Prettier eslint-config-prettier Embedded Malicious Code
- CVE-2023-22894 Strapi Cleartext Storage of Sensitive Information
- CVE-2021-21315 System Information Library for Node.JS Command Injection
- CVE-2020-11023 JQuery Cross-Site Scripting (XSS)
JavaScript (npm) packages with the most advisories
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.