Moderate 10,440 High 8,223 Critical 3,377 Low 1,524

maven 6,747 packagist 5,243 pypi 4,827 npm 4,305 go 2,836 nuget 1,537 cargo 1,087 rubygems 895 actions 39 hex 38 swift 33 pub 9

directus 39 parse-server 33 next 29 electron 28 flowise 24 @openzeppelin/contracts-upgradeable 21 @openzeppelin/contracts 21 sequelize 16 ghost 16 tinymce 16 vite 15 undici 15 angular 14 ckeditor4 14 swagger-ui 14 nodebb 14 joplin 14 strapi 13 marked 12 vm2 12 matrix-js-sdk 12 handlebars 11 TinyMCE 11 nocodb 11 tinymce/tinymce 11 n8n 10 uptime-kuma 9 serve 9 @strapi/strapi 9 matrix-react-sdk 9 matrix-appservice-irc 9 next-auth 9 systeminformation 9 @evershop/evershop 9 steal 8 @directus/api 8 @anthropic-ai/claude-code 8 elliptic 8 jsrsasign 8 url-parse 8 shescape 8 express-cart 8 @haxtheweb/haxcms-nodejs 8 urijs 8 npm 8 editor.md 8 sanitize-html 8 node-forge 8 dompurify 8 validator 8 hermes-engine 7 total.js 7 axios 7 tar 7 mongoose 7 vega 7 hapi 7 @lobehub/chat 7 snyk-broker 7 mermaid 7 parse-url 6 jquery-ui 6 org.webjars.npm:jquery-ui 6 openpgp 6 aaptjs 6 prismjs 6 rsshub 6 @sveltejs/kit 6 mattermost-desktop 6 bootstrap 6 hono 6 jQuery.UI.Combined 6 tarteaucitronjs 6 @strapi/plugin-users-permissions 6 safe-eval 6 passport-wsfed-saml2 5 dojo 5 jspdf 5 rendertron 5 mysql2 5 sweetalert2 5 vditor 5 katex 5 fastify 5 keystone 5 public 5 @keystone-6/core 5 @saltcorn/server 5 @backstage/plugin-scaffolder-backend 5 nuxt 5 astro 5 better-auth 5 ws 5 ejs 5 xlsx 5 total4 5 yarn 5 express 5 trix 5 aws-cdk-lib 5 jquery 5 ua-parser-js 5 remarkable 4 petite-vue-i18n 4 engine.io 4 fast-xml-parser 4 xml-crypto 4 simple-git 4 valine 4 erxes 4 bootstrap-sass 4 realms-shim 4 code-server 4 bootstrap 4 convert-svg-core 4 qs 4 jQuery 4 glance 4 materialize-css 4 froala-editor 4 snyk 4 mongosh 4 apollo-server-core 4 software.amazon.awssdk.iotdevicesdk:aws-iot-device-sdk 4 muhammara 4 @node-saml/node-saml 4 payload 4 awsiotsdk 4 vega-functions 4 auth0-js 4 hummus 4 auth0-lock 4 org.webjars:bootstrap 4 follow-redirects 4 generator-jhipster 4 jsonwebtoken 4 yui 4 apostrophe 4 pnpm 4 ecstatic 4 moment 4 @auth0/nextjs-auth0 4 @intlify/vue-i18n-core 4 ses 4 vue-i18n 4 tar-fs 4 simple-markdown 4 @finos/git-proxy 4 @apollo/gateway 4 jquery-validation 4 aws-iot-device-sdk-v2 4 mongo-express 4 bootstrap 4 safer-eval 4 multer 4 meshcentral 4 twbs/bootstrap 4 tough-cookie 3 http-live-simulator 3 @materializecss/materialize 3 socket.io-file 3 send 3 yapi-vendor 3 mathjs 3 node-opcua 3 jquery-ui-rails 3 socket.io-parser 3 immer 3 blamer 3 @intlify/core-base 3 m-server 3 renovate 3 connect 3 bson 3 typeorm 3 nodemailer 3 jointjs 3 @sequelize/core 3 jose 3 libxmljs 3 serialize-javascript 3 http-proxy-middleware 3 serialize-to-js 3 jose-node-cjs-runtime 3 @ckeditor/ckeditor5-markdown-gfm 3 mcp-markdownify-server 3 jose-node-esm-runtime 3 dojox 3 @strapi/utils 3 mxgraph 3 json-pointer 3 node-jose 3 @soketi/soketi 3 express-fileupload 3 dns-sync 3 node-ipc 3 angular-expressions 3 openmct 3 layui 3 ids-enterprise 3

https://github.com/haxtheweb/issues 2