A method for detecting vulnerabilities of NODE.JS components, comprising the following steps: collecting first basic vulnerability information from a NODE.JS vulnerability database; parsing a package.json file to obtain key information of a NODE.JS component; extracting first target vulnerability information from the first basic vulnerability information according to the key information of the NODE.JS component; and compiling the first target vulnerability information; wherein the extracting first target vulnerability information from the first basic vulnerability information according to the key information of the NODE.JS component comprises the following steps: setting a key information priority according to the relevancy of the key information; acquiring CVE information so as to collect CPE information; and matching the key information of the NODE.JS component with the CPE information according to the key information priority to generate first target vulnerability information; and wherein after the matching the key information of the NODE.JS component with the CPE information to generate first target vulnerability information, the method further comprises the following steps: extracting a NODE.JS component name from the NODE.JS key information; and forming the first target vulnerability information into a table to remove duplicate information by auditing, so as to determining a one-to-one correspondence between the NODE.JS component name and the CPE information. collecting first basic vulnerability information from a NODE.JS vulnerability database; parsing a package.json file to obtain key information of a NODE.JS component; extracting first target vulnerability information from the first basic vulnerability information according to the key information of the NODE.JS component; and compiling the first target vulnerability information; wherein the extracting first target vulnerability information from the first basic vulnerability information according to the key information of the NODE.JS component comprises the following steps: setting a key information priority according to the relevancy of the key information; acquiring CVE information so as to collect CPE information; and matching the key information of the NODE.JS component with the CPE information according to the key information priority to generate first target vulnerability information; and wherein after the matching the key information of the NODE.JS component with the CPE information to generate first target vulnerability information, the method further comprises the following steps: extracting a NODE.JS component name from the NODE.JS key information; and forming the first target vulnerability information into a table to remove duplicate information by auditing, so as to determining a one-to-one correspondence between the NODE.JS component name and the CPE information. setting a key information priority according to the relevancy of the key information; acquiring CVE information so as to collect CPE information; and matching the key information of the NODE.JS component with the CPE information according to the key information priority to generate first target vulnerability information; and wherein after the matching the key information of the NODE.JS component with the CPE information to generate first target vulnerability information, the method further comprises the following steps: extracting a NODE.JS component name from the NODE.JS key information; and forming the first target vulnerability information into a table to remove duplicate information by auditing, so as to determining a one-to-one correspondence between the NODE.JS component name and the CPE information. extracting a NODE.JS component name from the NODE.JS key information; and forming the first target vulnerability information into a table to remove duplicate information by auditing, so as to determining a one-to-one correspondence between the NODE.JS component name and the CPE information.