Vulnerability Database · npm · Package report
pixi.js: vulnerability history, versions and safety
pixi.js is a package in the npm ecosystem. Vulert holds no vulnerabilities for it yet.
Nothing recorded for this package in the npm ecosystem.
Every vulnerability has a patched version to move to.
No published version shipped hostile code.
Vulert verdict on pixi.js 8.22.0 i
Updated on 23 Oct 2026
Good news: 8.22.0, the version you would install today, has no known vulnerabilities.
- Security No known security issues
- Maintenance Sustainable
- Popularity Key ecosystem project
- Community Active
What to do: Stay on 8.22.0 or newer. This can change: a vulnerability disclosed tomorrow can affect 8.22.0 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →
- Current release 8.22.0 — unaffected i
- Vulnerabilities on record 0 i
- Highest CVSS n/a i
- With no published fix 0 i
- Depended on by 422 packages i
- Stars 48,401 i
- Last release this month i
- Licence MIT i
Version list, release dates, licence and dependants published by the npm registry, refreshed 23 Oct 2026. Licence information is not legal advice.
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Versions
Which versions are affected
Every version Vulert tracks for pixi.js, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.
- 8.22.0-dev.b78ff35 22 Oct 2026
- 8.22.0-dev.6555201 10 Oct 2026
- 8.22.0-dev.c2ee075 10 Oct 2026
- 8.22.0-dev.2f01671 08 Oct 2026
- 8.22.0-dev.3910339 07 Oct 2026
- 8.22.0-dev.02e4ce5 07 Oct 2026
- 8.22.0-dev.194e42c 06 Oct 2026
- 8.22.0-main.5b41ee3 05 Oct 2026
- 8.22.0 01 Oct 2026
- 8.22.0-dev.5b41ee3 01 Oct 2026
- 8.21.0-dev.9dc976d 01 Oct 2026
- 8.21.0-dev.1289ab7 01 Oct 2026
- 8.21.0-dev.082128a 30 Sep 2026
- 8.21.0-dev.f3d96db 30 Sep 2026
- 8.21.0-dev.8dbbeb9 29 Sep 2026
- 8.21.0-dev.ef0c0a7 28 Sep 2026
- 8.21.0-dev.27071aa 25 Sep 2026
- 8.21.0-dev.9ba378d 25 Sep 2026
- 8.21.0-dev.a3052f8 25 Sep 2026
- 8.21.0-dev.8b457ee 25 Sep 2026
- 8.21.0-dev.ea63441 25 Sep 2026
- 8.21.0 17 Sep 2026
- 8.21.0-dev.ecd3797 17 Sep 2026
- 8.20.1-dev.458bcfd 16 Sep 2026
- 8.20.1-dev.cb66cf3 16 Sep 2026
- 8.20.1-dev.3206959 16 Sep 2026
- 8.20.1-dev.10e361a 16 Sep 2026
- 8.20.1-dev.c07b3ee 16 Sep 2026
- 8.20.1-dev.b879493 16 Sep 2026
- 8.20.1-dev.c45759f 16 Sep 2026
- 8.20.1-dev.3bb05d5 15 Sep 2026
- 8.20.1-dev.1f70f60 15 Sep 2026
- 8.20.1-dev.a6763b8 15 Sep 2026
- 8.20.1-dev.6bcc937 14 Sep 2026
- 8.20.1-dev.cce4e29 14 Sep 2026
- 8.20.1-dev.75865b2 08 Sep 2026
- 8.20.1-dev.2eb5e91 08 Sep 2026
- 8.20.1-dev.66297a1 08 Sep 2026
- 8.20.1-dev.e3a29ef 07 Sep 2026
- 8.20.1-dev.164f4f1 07 Sep 2026
- 8.20.1-dev.d3a1751 03 Sep 2026
- 8.20.0-main.1f88cb4 26 Aug 2026
- 8.20.1 26 Aug 2026
- 8.20.1-dev.e0373fc 26 Aug 2026
- 8.20.1-main.3b6b563 26 Aug 2026
- 8.20.0-dev.029f4cc 26 Aug 2026
- 8.20.0-dev.ddc006c 26 Aug 2026
- 8.20.0-main.e4228ce 26 Aug 2026
- 8.20.0-dev.5dbe77c 24 Aug 2026
- 8.20.0-dev.4f4c655 24 Aug 2026
- 8.20.0 20 Aug 2026
- 8.20.0-dev.e4228ce 20 Aug 2026
- 8.19.0-dev.9ce96be 20 Aug 2026
- 8.19.0-dev.bdf53b5 19 Aug 2026
- 8.19.0-dev.42810dc 19 Aug 2026
- 8.19.0-dev.b42dbc1 19 Aug 2026
- 8.19.0-dev.48abeb5 19 Aug 2026
- 8.19.0-dev.aa7f1d6 19 Aug 2026
- 8.19.0-dev.0955bb8 19 Aug 2026
- 8.19.0-dev.3151a0f 11 Aug 2026
- 8.19.0-dev.4b141e3 11 Aug 2026
- 8.19.0-dev.db197ba 11 Aug 2026
- 8.19.0-dev.1d90a20 13 Jul 2026
- 8.19.0-dev.18af4a2 13 Jul 2026
- 8.19.0-dev.497a53c 08 Jul 2026
- 8.19.0-dev.433b9a9 08 Jul 2026
- 8.19.0-dev.3b9495d 08 Jul 2026
- 8.19.0-dev.b034fef 08 Jul 2026
- 8.19.0-dev.011f6fd 08 Jul 2026
- 8.19.0-dev.767b016 08 Jul 2026
- 8.19.0-dev.6601a90 08 Jul 2026
- 8.19.0-dev.8d02ed4 08 Jul 2026
- 8.19.0-dev.f4b382b 08 Jul 2026
- 8.19.0-dev.ad76fa5 08 Jul 2026
- 8.19.0-dev.aa3b2db 08 Jul 2026
- 8.19.0-dev.930d58f 08 Jul 2026
- 8.19.0-main.d93c5d3 05 Jun 2026
- 8.19.0-dev.cbaa784 05 Jun 2026
- 8.19.0 04 Jun 2026
- 8.19.0-dev.d93c5d3 04 Jun 2026
- 8.18.1-dev.23fd143 03 Jun 2026
- 8.18.1-dev.bdf32bd 03 Jun 2026
- 8.18.1-dev.b2f8668 02 Jun 2026
- 8.18.1-dev.1d1e44c 02 Jun 2026
- 8.18.1-dev.009e338 01 Jun 2026
- 8.18.1-dev.4b8d253 01 Jun 2026
- 8.18.1-dev.f9f9bf0 01 Jun 2026
- 8.18.1-dev.fd36778 12 May 2026
- 8.18.1-dev.69bffc1 06 May 2026
- 8.18.1-dev.e29e713 06 May 2026
- 8.18.1-dev.9a7e147 05 May 2026
- 8.18.1-main.8f42bb7 17 Apr 2026
- 8.18.1 14 Apr 2026
- 8.18.1-dev.8f42bb7 14 Apr 2026
- 8.18.0-dev.1947eb6 14 Apr 2026
- 8.18.0 14 Apr 2026
- 8.18.0-dev.2c5818b 14 Apr 2026
- 8.17.1-dev.39d2279 14 Apr 2026
- 8.17.1-dev.7a8f55c 14 Apr 2026
- 8.17.1-dev.16dad50 14 Apr 2026
- 8.17.1-dev.5e4640b 14 Apr 2026
- 8.17.1-dev.19b206c 13 Apr 2026
- 8.17.1-dev.17f1e1a 13 Apr 2026
- 8.17.1-dev.0c9a6a9 13 Apr 2026
- 8.17.1-dev.627a356 31 Mar 2026
- 8.17.1-dev.e73305b 31 Mar 2026
- 8.17.1 16 Mar 2026
- 8.17.1-dev.6e59c6f 16 Mar 2026
- 8.17.0-dev.fc5ec38 16 Mar 2026
- 8.17.0-main.4806c3b 10 Mar 2026
- 8.17.0 09 Mar 2026
- 8.17.0-dev.4806c3b 09 Mar 2026
- 8.16.0-dev.6e9619d 09 Mar 2026
- 8.16.0-dev.128ab8a 09 Mar 2026
- 8.16.0-dev.c877399 06 Mar 2026
- 8.16.0-dev.3878d00 06 Mar 2026
- 8.16.0-dev.c24a9ca 05 Mar 2026
- 8.16.0-dev.aa6045d 05 Mar 2026
- 8.16.0-dev.0167a57 05 Mar 2026
- 8.16.0-dev.7511ef7 05 Mar 2026
The newest 120 of 818 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.
02 Disclosure history
How often vulnerabilities are recorded
No dated vulnerabilities are recorded for this package yet.
Other ways into the data
03 Vulnerabilities
Recorded vulnerabilities for pixi.js
No vulnerabilities match this view.
Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback
Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315
Questions
About pixi.js
Is pixi.js safe to use?
Vulert has no vulnerabilities on record for pixi.js in npm at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.
What is pixi.js's Vulert package health score?
Vulert scores pixi.js 96/100, which reads as healthy. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).
Is the latest version of pixi.js affected?
No. 8.22.0, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.
Which version of pixi.js should I use?
8.22.0 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.
How many vulnerabilities does pixi.js have?
0 vulnerabilities are recorded for pixi.js in the npm ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.
How often are new pixi.js vulnerabilities disclosed?
0 vulnerabilities were recorded for pixi.js in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.
Which versions of pixi.js are affected?
Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.
How do I monitor pixi.js for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the pixi.js version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.