npm
Security Advisories in npm
Moderate
about 15 hours ago
Vitest: Servers misapply `server.fs.deny`, serving `.env`, private keys, `.git`, and the API token file
npm
vite-plus, @vitest/browser, @vitest/ui
Moderate
about 16 hours ago
Vitest: Code injection via unauthenticated manual mock registration
npm
@vitest/mocker
Moderate
about 16 hours ago
Vitest: Windows backslash traversal bypasses the @vitest/mocker redirect allowlist fix
npm
@vitest/mocker
Moderate
about 16 hours ago
ApostropheCMS: Exposure of Sensitive Information via predictable export filenames
npm
@apostrophecms/import-export
Moderate
about 16 hours ago
OpenClaw: Browser CDP discovery could accept blocked WebSocket URLs
npm
openclaw
Critical
about 18 hours ago
Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites
npm
@storybook/addon-mcp, @storybook/addon-vitest, @storybook/experimental-addon-test, @storybook/core-server, @storybook/core, storybook
Moderate
about 18 hours ago
Electron: HID and USB permission checks can be attributed to the wrong origin
npm
electron
Moderate
about 18 hours ago
ApostropheCMS: POST /api/v1/@apostrophecms/doc/slugTaken discloses existence of private/admin-only content to any authenticated user
npm
apostrophe
Moderate
about 18 hours ago
ApostropheCMS: GET /api/v1/@apostrophecms/page/:id bypasses viewRole restriction and exposes viewPermission-gated fields to lower-privileged users
npm
apostrophe
Moderate
about 18 hours ago
ApostropheCMS: Stored XSS via Unescaped Widget Style Attribute Serialization
npm
apostrophe
Low
about 18 hours ago
ApostropheCMS: Missing Authentication in `cleanExport` Route
npm
@apostrophecms/import-export
Moderate
about 18 hours ago
ApostropheCMS: Unauthenticated publicApiProjection bypass via search and sort query builders in the public REST API
npm
apostrophe
Moderate
about 18 hours ago
ApostropheCMS: Color field validation bypass allows stored XSS via HTML appended after rgb()/hsl() prefix
npm
apostrophe
Moderate
about 18 hours ago
ApostropheCMS sanitize-html: unbounded recursion when re-sanitizing the fallback of a discarded iframe (stack overflow, nestingLimit not enforced)
npm
sanitize-html
Moderate
about 18 hours ago
ApostropheCMS: Import API bypasses publication roles for protected content
npm
apostrophe, @apostrophecms/import-export
Moderate
about 18 hours ago
ApostropheCMS: Archive duplicate continuation lets contributors overwrite published content
npm
@apostrophecms/import-export
Moderate
about 18 hours ago
ApostropheCMS: Import archives can exhaust server storage and deny service
npm
@apostrophecms/import-export
Low
about 19 hours ago
Vite: Cross origin script execution through Vite custom middleware
npm
vite-plus, vite
Moderate
about 19 hours ago
Vite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machine
npm
vite-plus, vite
Moderate
about 19 hours ago
Vite: First 4 bytes of files outside of `server.fs` setting is exposed by `?vite-wasm-instance`
npm
vite-plus, vite
High
about 22 hours ago
ApostropheCMS: Unauthenticated resource exhaustion via pre-auth aposBigUpload processing in @apostrophecms/import-export
npm
@apostrophecms/import-export, apostrophe
Moderate
1 day ago
@angular/common: XSRF Token Leakage via URL Parsing Discrepancy in Angular HTTP Client (Incomplete fix for CVE-2025-66035)
npm
@angular/common
Low
1 day ago
markdown-it: Quadratic-time denial of service in inline HTML parsing with html enabled
npm
markdown-it
High
1 day ago
MCP TypeScript server SDK: Shared transport or server instances delivered one HTTP client's messages to another
npm
@modelcontextprotocol/server
High
1 day ago
MCP TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation
npm
@modelcontextprotocol/server, @modelcontextprotocol/sdk
Moderate
1 day ago
launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors
npm
vite-plus, vite, launch-editor
High
1 day ago
launch-editor: `fs.existsSync()` existence check can be bypassed on Windows
npm
vite-plus, vite, launch-editor
Moderate
1 day ago
MCP TypeScript SDK: Server bearer authentication accepted tokens issued for another service
npm
@modelcontextprotocol/server-legacy, @modelcontextprotocol/express, @modelcontextprotocol/server, @modelcontextprotocol/sdk
Moderate
1 day ago
launch-editor: escapeCmdArgs() omits % escaping on Windows
npm
vite-plus, vite, launch-editor
High
1 day ago
MCP TypeScript SDK: Experimental tasks were not tied to the session that created them
npm
@modelcontextprotocol/sdk
Moderate
1 day ago
MCP TypeScript client SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies
npm
@modelcontextprotocol/client, @modelcontextprotocol/sdk
Low
1 day ago
ApostropheCMS: Missing Authorization on Notification PATCH/DELETE Endpoints
npm
apostrophe
Moderate
1 day ago
ApostropheCMS import-export tar guard misses './..' because it is a literal '../' substring test
npm
@apostrophecms/import-export
Low
1 day ago
ApostropheCMS sanitize-html: SMIL animation namespace-prefix bypass allows javascript: URI injection (XSS)
npm
sanitize-html
Moderate
1 day ago
ApostropheCMS uploadfs Azure backend leaks account-level SAS token into every public attachment URL (sas: true)
npm
uploadfs
Moderate
1 day ago
ApostropheCMS: Authenticated Object-Level Authorization Bypass in exist-in-locale Reveals Restricted Localized Draft Identifiers
npm
apostrophe
Moderate
1 day ago
ApostropheCMS import-export: NoSQL injection via update-key value lets a crafted import match and overwrite an unidentified document
npm
@apostrophecms/import-export
Moderate
1 day ago
ApostropheCMS: Client-side Prototype Pollution in apos.http.parseQuery leading to DOM-based XSS against authenticated users
npm
apostrophe
Moderate
1 day ago
ApostropheCMS: No Attempt Throttling on Authenticated Password-Change Endpoint Enables Unlimited Current-Password Guessing
npm
apostrophe
Moderate
1 day ago
ApostropheCMS: Incomplete CVE-2026-53606: `meta http-equiv=refresh` `content` still ships `javascript:` / `data:` URLs
npm
sanitize-html
Moderate
1 day ago
ApostropheCMS: Host header controls server-side image fetch origin in @apostrophecms/ai-helper, enabling authenticated SSRF
npm
@apostrophecms/ai-helper
High
1 day ago
ApostropheCMS: Unauthenticated CSV import requests leave rejected uploads in the system temporary directory
npm
apostrophe
Moderate
1 day ago
ApostropheCMS: Cross-domain session token in URL confers session takeover
npm
@apostrophecms/passport-bridge, apostrophe
Moderate
1 day ago
ApostropheCMS: Unauthenticated unbounded multipart upload → disk-exhaustion DoS
npm
@apostrophecms/form
Moderate
1 day ago
ApostropheCMS: CAPTCHA response token not URL-encoded
npm
@apostrophecms/login-hcaptcha, @apostrophecms/login-recaptcha, @apostrophecms/form
High
1 day ago
ApostropheCMS: Authenticated projection-exclusion prototype-member deletion in @apostrophecms/db-connect causes process-wide denial of service
npm
apostrophe, @apostrophecms/db-connect
Moderate
1 day ago
ApostropheCMS sanitize-html: nonTextTags discard region ends early on an implied close, letting <noscript> content render
npm
sanitize-html
High
1 day ago
follow-redirects array-form headers bypass cross-origin credential stripping
npm
follow-redirects
High
1 day ago
follow-redirects sensitiveHeaders regex escaping can expose credential headers
npm
follow-redirects
High
1 day ago
@angular/router: Denial of Service via RouterLink Query Parameter Retention in Server-Side Rendering (SSR)
npm
@angular/router
High
2 days ago
@angular/router: Denial of Service via Unmatched Empty-Path Outlet Route Matching in Server-Side Rendering (SSR)
npm
@angular/router
Moderate
2 days ago
Hono: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths
npm
hono
Moderate
2 days ago
@angular/platform-server: Open Redirect via Protocol-Relative URLs in Server-Side Rendering (SSR)
npm
@angular/platform-server
High
2 days ago
markdown-it: Quadratic complexity in smartquotes with unmatched closing quotes
npm
markdown-it
Low
6 days ago
ckan-mcp-server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "*" (out)
npm
@aborruso/ckan-mcp-server
Critical
7 days ago
TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses
npm
@tanstack/vue-start, @tanstack/solid-start, @tanstack/react-start, @tanstack/start-server-core
High
7 days ago
Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning
npm
@anthropic-ai/claude-code
High
7 days ago
Qwik: Crashing any Qwik Server via Resource thenable
npm
@qwik.dev/core, @builder.io/qwik
Moderate
7 days ago
Backstage: Improper access control in backend action invocation
npm
@backstage/backend-defaults
Moderate
7 days ago
Appium: Symlink based Zip Slip in @appium/support ZIP extraction
npm
@appium/support
Moderate
7 days ago
Nuxt OG Image cache poisoning through derivable cache keys on unsigned dynamic image routes
npm
nuxt-og-image
High
7 days ago
OpenNext Cloudflare: Cache interception can bypass middleware protection for encoded paths
npm
@opennextjs/cloudflare
Moderate
7 days ago
AdonisJS HTTP Server: Uncontrolled Resource Consumption and Inefficient Regular Expression Complexity
npm
@adonisjs/http-server
High
13 days ago
Tina: Code injection via unescaped Git branch name in generated client source
npm
@tinacms/cli
Critical
13 days ago
TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment
npm
@tinacms/app, tinacms
High
13 days ago
@tinacms/web-components: `tina-markdown` writes rich-text link URLs into `href` without scheme validation, allowing stored XSS
npm
@tinacms/web-components
Moderate
14 days ago
AdonisJS: Unencoded route parameters can produce open redirects
npm
@adonisjs/http-server
High
14 days ago
fast-jwt: createVerifier accepts unsigned JWTs when key is '' or null and algorithms is explicitly set
npm
fast-jwt
Critical
14 days ago
fast-jwt: Incomplete patch of CVE-2026-34950: Non-whitespace key-prefix re-enables RSA→HS256 algorithm confusion
npm
fast-jwt
Moderate
14 days ago
fast-jwt clockTolerance: Infinity silently bypasses both exp and nbf validation (and persists in the verifier cache)
npm
fast-jwt
High
14 days ago
fast-jwt : Silent claim-validator bypass when JWT payload is a JSON array
npm
fast-jwt
High
14 days ago
fast-jwt treats raw public JWK JSON as an HMAC secret, enabling HS256 token forgery
npm
fast-jwt
Moderate
14 days ago
music-metadata: MP4 stsd sample-entry size==0 causes a synchronous infinite loop (DoS) — unreleased regression on master
npm
music-metadata
Moderate
14 days ago
music-metadata: Uncontrolled memory allocation in APEv2 parser
npm
music-metadata
Moderate
14 days ago
music-metadata: ID3v2 tag size not validated before allocation, causing memory exhaustion DoS
npm
music-metadata
Moderate
14 days ago
music-metadata: EBML parser trusts element lengths, allowing memory exhaustion or process abort
npm
music-metadata
High
14 days ago
MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPES
npm
mariadb
High
14 days ago
MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries)
npm
mariadb
High
14 days ago
MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parameters
npm
mariadb
Moderate
14 days ago
MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLS
npm
mariadb
Moderate
14 days ago
music-metadata: uncatchable process crash parsing a crafted `.dsf` (residual of GHSA-v6c2-xwv6-8xf7)
npm
music-metadata
Moderate
14 days ago
Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled Templates
npm
handlebars
Critical
14 days ago
Handlebars: JavaScript Injection via AST Type Confusion in compile (bypass of CVE-2026-33937)
npm
handlebars
Moderate
14 days ago
LangChain: MongoDBChatMessageHistory query injection can allow cross-session access
npm
@langchain/mongodb
High
14 days ago
JHipster: SQL Injection in the Parameter of JHipster-Generated Reactive (WebFlux + R2DBC) Applicationssort
npm
generator-jhipster
High
14 days ago
JHipster: Generated Applications Allow Stored XSS via Unrestricted Blob ContentType Opened as Same-Origin Blob
npm
react-jhipster, generator-jhipster
High
14 days ago
msgpack5: Many buffered values can exhaust the streaming decoder stack
npm
msgpack5
Filter by Severity
Filter by Package
openclaw
592
n8n
156
parse-server
116
flowise
114
vm2
78
next
73
electron
71
ghost
61
directus
58
axios
55
nocodb
54
hono
52
undici
46
@budibase/server
42
apostrophe
35
pnpm
32
flowise-components
31
dompurify
30
payload
30
@anthropic-ai/claude-code
29
vite
28
astro
27
better-auth
22
handlebars
22
@xmldom/xmldom
22
@openzeppelin/contracts-upgradeable
22
nuxt
21
fuxa-server
21
@openzeppelin/contracts
21
tar
21
react-router
20
nodemailer
20
tinymce
20
liquidjs
19
sequelize
18
@sveltejs/kit
17
sanitize-html
17
@backstage/plugin-scaffolder-backend
17
protobufjs
17
fastify
17
9router
17
xmldom
17
mermaid
16
@haxtheweb/haxcms-nodejs
16
node-forge
16
devalue
16
tinymce/tinymce
15
jspdf
15
angular
15
ckeditor4
15
TinyMCE
15
multer
14
fast-jwt
14
jsrsasign
14
svelte
14
nodebb
14
signalk-server
14
joplin
14
next-auth
14
systeminformation
14
swagger-ui
14
@nyariv/sandboxjs
14
fast-uri
13
electerm
13
shescape
13
marked
13
@directus/api
12
fast-xml-parser
12
matrix-js-sdk
12
orval
12
@evershop/evershop
12
js-yaml
12
@angular/platform-server
12
strapi
12
@oneuptime/common
11
renovate
11
n8n-mcp
11
@strapi/strapi
11
clawdbot
11
deepseek-tui
11
deepseek-tui
11
vite-plus
11
sillytavern
11
@lobehub/chat
11
@backstage/plugin-techdocs-node
11
uptime-kuma
11
trigger.dev
10
validator
10
h3
10
bootstrap
10
open-webui
10
simple-git
10
lodash
10
@apostrophecms/import-export
10
praisonai
10
brace-expansion
10
qs
9
codewhale-tui
9
serve
9
@angular/core
9
mongoose
9
@saltcorn/server
9
network-ai
9
trix
9
@tinacms/cli
9
@astrojs/node
9
adm-zip
9
elliptic
9
matrix-appservice-irc
9
matrix-react-sdk
9
codewhale
9
markdown-it
8
@strapi/plugin-users-permissions
8
url-parse
8
react-server-dom-parcel
8
@keystone-6/core
8
org.webjars.npm:jquery
8
@angular/common
8
vega
8
@paperclipai/server
8
aws-cdk-lib
8
@builder.io/qwik-city
8
lodash-es
8
npm
8
steal
8
tarteaucitronjs
8
seroval
8
jquery-rails
8
msgpack5
8
react-server-dom-webpack
8
@actual-app/sync-server
8
editor.md
8
react-server-dom-turbopack
8
urijs
8
jquery
8
ip-address
8
locutus
8
@modelcontextprotocol/sdk
8
jQuery.UI.Combined
7
mysql2
7
jQuery
7
studiocms
7
@vitejs/plugin-rsc
7
bootstrap
7
lodash-rails
7
jquery-ui
7
jodit
7
@fedify/fedify
7
hermes-engine
7
mattermost-desktop
7
@aborruso/ckan-mcp-server
7
hapi
7
postcss
7
ws
7
@hulumi/policies
7
unleash-server
7
total.js
7
express-cart
7
bootstrap
7
@asymmetric-effort/specifyjs
7
twbs/bootstrap
7
webpack-dev-server
7
snyk-broker
7
@sync-in/server
7
@auth0/nextjs-auth0
7
engine.io
7
@angular/ssr
7
@vendure/core
7
mariadb
7
jquery-ui-rails
7
budibase
7
org.webjars.npm:jquery-ui
7
org.webjars:bootstrap
7
follow-redirects
7
@angular/compiler
7
node-opcua
6
prismjs
6
@grpc/grpc-js
6
openpgp
6
bootstrap-sass
6
typeorm
6
serialize-javascript
6
@steipete/summarize
6
bootstrap-sass
6
open-webui
6
swagger-typescript-api
6
safe-eval
6
@evomap/evolver
6
@frangoteam/fuxa
6
generator-jhipster
6
@hono/node-server
6
basic-ftp
6
parse-url
6
nuxt-og-image
6
rsshub
6
nx
6
ep_etherpad-lite
6
katex
6
@budibase/backend-core
6
@backstage/backend-defaults
6
Filter by Repository
https://github.com/directus/directus
41
https://github.com/parse-community/parse-server
34
https://github.com/strapi/strapi
28
https://github.com/FlowiseAI/Flowise
28
https://github.com/electron/electron
28
https://github.com/vercel/next.js
25
https://github.com/OpenZeppelin/openzeppelin-contracts
21
https://github.com/backstage/backstage
19
https://github.com/tinymce/tinymce
16
https://github.com/sequelize/sequelize
16
https://github.com/vitejs/vite
16
https://github.com/nodejs/undici
15
https://github.com/TryGhost/Ghost
14
https://github.com/ckeditor/ckeditor4
14
https://github.com/laurent22/joplin
13
https://github.com/swagger-api/swagger-ui
13
https://github.com/NodeBB/NodeBB
12
https://github.com/patriksimek/vm2
12
https://github.com/n8n-io/n8n
12
https://github.com/matrix-org/matrix-js-sdk
12
https://github.com/keystonejs/keystone
11
https://github.com/nocodb/nocodb
11
https://github.com/nextauthjs/next-auth
11
https://github.com/VulnSageAgent/PoCs
10
https://github.com/louislam/uptime-kuma
10
https://github.com/anthropics/claude-code
10
https://github.com/jquery/jquery
10
https://github.com/haxtheweb/issues
9
https://github.com/evershopcommerce/evershop
9
https://github.com/sebhildebrandt/systeminformation
9
https://github.com/matrix-org/matrix-appservice-irc
9
https://github.com/matrix-org/matrix-react-sdk
9
https://github.com/withastro/astro
9
https://github.com/indutny/elliptic
8
https://github.com/pandao/editor.md
8
https://github.com/ericcornelissen/shescape
8
https://github.com/apollographql/apollo-server
8
https://github.com/cure53/DOMPurify
8
https://github.com/digitalbazaar/forge
8
https://github.com/stealjs/steal
8
https://github.com/kjur/jsrsasign
8
https://github.com/honojs/hono
8
https://github.com/vega/vega
8
https://github.com/lobehub/lobe-chat
8
https://github.com/nuxt/nuxt
8
https://github.com/twbs/bootstrap
7
https://github.com/axios/axios
7
https://github.com/lodash/lodash
7
https://github.com/aws/aws-cdk
7
https://github.com/saltcorn/saltcorn
7
https://github.com/unshiftio/url-parse
7
https://github.com/shenzhim/aaptjs
6
https://github.com/eclipse-theia/theia
6
https://github.com/ionicabizau/parse-url
6
https://github.com/npm/node-tar
6
https://github.com/apostrophecms/sanitize-html
6
https://github.com/sveltejs/kit
6
https://github.com/panva/jose
6
https://github.com/ckeditor/ckeditor5
6
https://github.com/jquery/jquery-ui
6
https://github.com/DIYgod/RSSHub
6
https://github.com/better-auth/better-auth
6
https://github.com/facebook/hermes
6
https://github.com/totaljs/framework
6
https://github.com/markedjs/marked
6
https://github.com/openpgpjs/openpgpjs
6
https://github.com/basecamp/trix
5
https://github.com/auth0/passport-wsfed-saml2
5
https://github.com/mermaid-js/mermaid
5
https://github.com/gatsbyjs/gatsby
5
https://github.com/AmauriC/tarteaucitron.js
5
https://github.com/faisalman/ua-parser-js
5
https://github.com/KaTeX/KaTeX
5
https://github.com/hacksparrow/safe-eval
5
https://github.com/fastify/fastify
5
https://github.com/sidorares/node-mysql2
5
https://github.com/handlebars-lang/handlebars.js
5
https://github.com/BlackFan/client-side-prototype-pollution
5
https://github.com/Automattic/mongoose
5
https://github.com/cloudflare/workers-sdk
5
https://github.com/PrismJS/prism
5
https://github.com/sweetalert2/sweetalert2
5
https://github.com/npm/cli
5
https://github.com/GoogleChrome/rendertron
5
https://github.com/websockets/ws
4
https://github.com/hapijs/hapi
4
https://github.com/steveukx/git-js
4
https://github.com/medialize/URI.js
4
https://github.com/node-saml/node-saml
4
https://github.com/xCss/Valine
4
https://github.com/koajs/koa
4
https://github.com/expressjs/express
4
https://github.com/expressjs/multer
4
https://github.com/medialize/uri.js
4
https://github.com/npm/npm
4
https://github.com/mde/ejs
4
https://github.com/follow-redirects/follow-redirects
4
https://github.com/open-webui/open-webui
4
https://github.com/aws/aws-iot-device-sdk-java-v2
4
https://github.com/yarnpkg/yarn
4
https://github.com/jonschlinkert/remarkable
4
https://github.com/pnpm/pnpm
4
https://github.com/NaturalIntelligence/fast-xml-parser
4
https://github.com/node-opcua/node-opcua
4
https://github.com/erxes/erxes
4
https://github.com/jhipster/generator-jhipster
4
https://github.com/intlify/vue-i18n
4
https://github.com/auth0/lock
4
https://github.com/angular/angular.js
4
https://github.com/Ylianst/MeshCentral
4
https://github.com/mafintosh/tar-fs
4
https://github.com/payloadcms/payload
4
https://github.com/nodemailer/nodemailer
4
https://github.com/finos/git-proxy
4
https://github.com/socketio/engine.io
4
https://github.com/auth0/node-jsonwebtoken
4
https://github.com/auth0/nextjs-auth0
4
https://github.com/Dogfalo/materialize
4
https://github.com/getsentry/sentry-javascript
4
https://github.com/typeorm/typeorm
4
https://github.com/balderdashy/sails
4
https://github.com/jquery-validation/jquery-validation
4
https://github.com/ofirdagan/cross-domain-local-storage
4
https://github.com/vendure-ecommerce/vendure
4
https://github.com/nodejs/llhttp
3
https://github.com/lukeed/dset
3
https://github.com/cloudhead/node-static
3
https://github.com/socketio/socket.io
3
https://github.com/vriteio/vrite
3
https://github.com/plone/volto
3
https://github.com/mariocasciaro/object-path
3
https://github.com/fastify/fastify-multipart
3
https://github.com/salesforce/tough-cookie
3
https://github.com/jasonraimondi/url-to-png
3
https://github.com/RIAEvangelist/node-ipc
3
https://github.com/peerigon/angular-expressions
3
https://github.com/adaltas/node-mixme
3
https://github.com/MrRio/jsPDF
3
https://github.com/dojo/dojox
3
https://github.com/jarofghosts/glance
3
https://github.com/Escape-Technologies/graphql-armor
3
https://github.com/manuelstofer/json-pointer
3
https://github.com/node-saml/xml-crypto
3
https://github.com/immerjs/immer
3
https://github.com/koush/scrypted
3
https://github.com/facebook/react
3
https://github.com/highcharts/highcharts
3
https://github.com/udecode/plate
3
https://github.com/Marak/colors.js
3
https://github.com/webpack/webpack-dev-server
3
https://github.com/libxmljs/libxmljs
3
https://github.com/chimurai/http-proxy-middleware
3
https://github.com/clientIO/joint
3
https://github.com/josdejong/mathjs
3
https://github.com/vanessa219/vditor
3
https://github.com/docsifyjs/docsify
3
https://github.com/mozilla/node-convict
3
https://github.com/ag-grid/ag-grid
3
https://github.com/dwisiswant0/advisory
3
https://github.com/zeit/next.js
3
https://github.com/eladnava/mailgen
3
https://github.com/transloadit/uppy
3
https://github.com/mongodb/js-bson
3
https://github.com/zestedesavoir/zmarkdown
3
https://github.com/agnaistic/agnai
3
https://github.com/node-fetch/node-fetch
3
https://github.com/ua-parser/uap-core
3
https://github.com/dojo/dojo
3
https://github.com/actions/toolkit
3
https://github.com/snowflakedb/snowflake-connector-nodejs
3
https://github.com/infor-design/enterprise-ng
3
https://github.com/chjj/marked
3
https://github.com/neocotic/convert-svg
3
https://github.com/remix-run/react-router
3
https://github.com/cisco/node-jose
3
https://github.com/apollographql/federation
3
https://github.com/renovatebot/renovate
3
https://github.com/zcaceres/markdownify-mcp
3
https://github.com/skoranga/node-dns-sync
3
https://github.com/socketio/socket.io-parser
3
https://github.com/feathersjs-ecosystem/feathers-sequelize
3
https://github.com/mrvautin/expressCart
3
https://github.com/soketi/soketi
3
https://github.com/YMFE/yapi
3
https://github.com/ChainSafe/lodestar
3
https://github.com/jfhbrook/node-ecstatic
3
https://github.com/nestjs/nest
3
https://github.com/endojs/endo
3
https://github.com/OpenZeppelin/openzeppelin-contracts-upgradeable
3
https://github.com/mozilla/pdf.js
3
https://github.com/capricorn86/happy-dom
3
https://github.com/moment/moment
3
https://github.com/HackAllSec/CVEs
3
https://github.com/kujirahand/nadesiko3
3
https://github.com/simpleledger/slpjs
3
https://github.com/nasa/openmct
3
https://github.com/validatorjs/validator.js
3
https://github.com/beerpwn/CVE
3
https://github.com/hapijs/subtext
3