Moderate 10,422 High 8,210 Critical 3,371 Low 1,512

maven 6,692 packagist 5,247 pypi 4,817 npm 4,277 go 2,831 nuget 1,538 cargo 1,079 rubygems 897 hex 38 actions 37 swift 33 pub 9

directus 39 parse-server 33 next 29 electron 28 flowise 24 @openzeppelin/contracts-upgradeable 21 @openzeppelin/contracts 21 sequelize 16 tinymce 16 ghost 16 vite 15 undici 15 ckeditor4 15 swagger-ui 14 joplin 14 nodebb 14 angular 14 strapi 13 matrix-js-sdk 12 vm2 12 marked 12 nocodb 11 handlebars 11 n8n 10 tinymce/tinymce 10 TinyMCE 10 next-auth 9 serve 9 uptime-kuma 9 @strapi/strapi 9 systeminformation 9 matrix-appservice-irc 9 @evershop/evershop 9 matrix-react-sdk 9 steal 8 dompurify 8 validator 8 jsrsasign 8 url-parse 8 sanitize-html 8 tar 8 @anthropic-ai/claude-code 8 express-cart 8 node-forge 8 editor.md 8 urijs 8 shescape 8 @haxtheweb/haxcms-nodejs 8 elliptic 8 npm 8 @directus/api 7 vega 7 @lobehub/chat 7 axios 7 mongoose 7 hermes-engine 7 hapi 7 snyk-broker 7 mermaid 7 total.js 7 rsshub 6 prismjs 6 @sveltejs/kit 6 org.webjars.npm:jquery-ui 6 jquery-ui 6 parse-url 6 safe-eval 6 bootstrap 6 tarteaucitronjs 6 aaptjs 6 mattermost-desktop 6 @strapi/plugin-users-permissions 6 jQuery.UI.Combined 6 openpgp 6 hono 6 @keystone-6/core 5 public 5 jquery 5 froala-editor 5 ua-parser-js 5 sweetalert2 5 jspdf 5 katex 5 express 5 aws-cdk-lib 5 vditor 5 @backstage/plugin-scaffolder-backend 5 trix 5 total4 5 ejs 5 bootstrap 5 passport-wsfed-saml2 5 keystone 5 org.webjars:bootstrap 5 mysql2 5 fastify 5 dojo 5 bootstrap-sass 5 nuxt 5 astro 5 yarn 5 better-auth 5 rendertron 5 ws 5 @saltcorn/server 5 twbs/bootstrap 5 @intlify/vue-i18n-core 4 simple-markdown 4 glance 4 tar-fs 4 apollo-server-core 4 materialize-css 4 mongosh 4 jsonwebtoken 4 auth0-js 4 qs 4 code-server 4 snyk 4 muhammara 4 pnpm 4 valine 4 @auth0/nextjs-auth0 4 aws-iot-device-sdk-v2 4 fast-xml-parser 4 awsiotsdk 4 vue-i18n 4 generator-jhipster 4 petite-vue-i18n 4 xml-crypto 4 simple-git 4 erxes 4 jQuery 4 remarkable 4 realms-shim 4 yui 4 ecstatic 4 meshcentral 4 jquery-validation 4 convert-svg-core 4 apostrophe 4 bootstrap 4 auth0-lock 4 @finos/git-proxy 4 @apollo/gateway 4 moment 4 vega-functions 4 mongo-express 4 ses 4 multer 4 bootstrap-sass 4 payload 4 safer-eval 4 follow-redirects 4 software.amazon.awssdk.iotdevicesdk:aws-iot-device-sdk 4 engine.io 4 @node-saml/node-saml 4 mxgraph 3 jquery-ui-rails 3 connect 3 yapi-vendor 3 highcharts 3 xdLocalStorage 3 @intlify/core 3 llhttp 3 stimulsoft-dashboards-js 3 localhost-now 3 @soketi/soketi 3 @strapi/utils 3 @strapi/admin 3 ftp-srv 3 socket.io-file 3 node-red-dashboard 3 codecov 3 serialize-javascript 3 libxmljs 3 bootstrap.sass 3 locutus 3 parsel 3 @cubejs-backend/api-gateway 3 mcp-markdownify-server 3 socket.io 3 dojox 3 @janhq/core 3 jointjs 3 slp-validate 3 webpack-dev-server 3 nodemailer 3 mysql 3 simplehttpserver 3 immer 3 @apollo/server 3 ids-enterprise 3 @commercial/subtext 3 @frangoteam/fuxa 3 loader-utils 3 @hapi/subtext 3 http-live-simulator 3 open-webui 3 renovate 3 nadesiko3 3

https://github.com/haxtheweb/issues 8