High 2,757 Moderate 2,419 Critical 1,330 Low 423 Medium 1

openclaw 300 n8n 62 nocodb 41 parse-server 40 hono 36 directus 34 electron 30 ghost 29 next 28 flowise 24 axios 23 dompurify 19 undici 16 pnpm 14 tinymce 14 astro 14 svelte 13 vite 13 mermaid 12 @openzeppelin/contracts 12 @openzeppelin/contracts-upgradeable 11 ckeditor4 11 renovate 11 tinymce/tinymce 11 TinyMCE 11 bootstrap 10 joplin 10 sanitize-html 10 swagger-ui 9 angular 9 protobufjs 9 react-router 8 @sveltejs/kit 8 uptime-kuma 8 validator 8 nuxt 8 @directus/api 8 editor.md 8 @astrojs/node 7 org.webjars.npm:jquery-ui 7 nodebb 7 trix 7 nodemailer 7 jquery-ui 7 marked 7 tarteaucitronjs 7 @budibase/server 7 jQuery.UI.Combined 7 snyk-broker 6 vega 6 matrix-js-sdk 6 fastify 6 vm2 6 webpack-dev-server 6 jodit 6 @lobehub/chat 6 h3 6 @asymmetric-effort/specifyjs 6 @evershop/evershop 6 signalk-server 6 urijs 6 url-parse 6 liquidjs 6 katex 5 lodash 5 postcss 5 next-auth 5 bootstrap 5 vditor 5 matrix-appservice-irc 5 payload 5 js-yaml 5 apostrophe 5 bootstrap-sass 4 ep_etherpad-lite 4 clawdbot 4 jspdf 4 @haxtheweb/haxcms-nodejs 4 matrix-react-sdk 4 rsshub 4 apollo-server-core 4 handlebars 4 follow-redirects 4 studiocms 4 re2 4 jQuery 4 @builder.io/qwik-city 4 lodash-es 4 @auth0/nextjs-auth0 4 shescape 4 materialize-css 4 @steipete/summarize 4 @hono/node-server 4 @actual-app/sync-server 4 sillytavern 4 vega-functions 4 yui 4 glance 4 serve 4 @anthropic-ai/claude-code 4 fast-jwt 4 tar 4 qs 4 n8n-mcp 4 network-ai 4 jquery 4 @saltcorn/server 4 froala-editor 4 @angular/core 3 bootstrap 3 jose 3 serialize-javascript 3 bootstrap-sass 3 statics-server 3 @strapi/strapi 3 magicmirror 3 docsify 3 ip-address 3 jose-node-cjs-runtime 3 sequelize 3 action_text-trix 3 @excalidraw/excalidraw 3 @cyclonedx/cdxgen 3 @angular/ssr 3 better-auth 3 @aborruso/ckan-mcp-server 3 fuxa-server 3 mysql 3 http-proxy-middleware 3 @intlify/vue-i18n-core 3 @jmondi/url-to-png 3 layui 3 jose-node-esm-runtime 3 jquery-ui-rails 3 xmldom 3 mysql2 3 systeminformation 3 agents 3 valine 3 node-forge 3 petite-vue-i18n 3 express 3 @materializecss/materialize 3 parse-url 3 fast-xml-parser 3 showdown 3 @ckeditor/ckeditor5-markdown-gfm 3 vue-i18n 3 yapi-vendor 3 mcp-searxng 3 @nyariv/sandboxjs 3 @perfood/couch-auth 3 langsmith 3 hapi 3 markdown-it 3 parse 3 dojo 3 @fastify/static 3 xlsx 3 mattermost-desktop 3 @backstage/techdocs-common 3 strapi 3 public 3 nuxt-og-image 3 m-server 3 @nuxt/rspack-builder 3 moodle/moodle 3 lodash-amd 3 flowise-components 3 @pdfme/schemas 3 gitbook 2 nitro 2 @anthropic-ai/sdk 2 connect 2 @angular/service-worker 2 jose-browser-runtime 2 electerm 2 simditor 2 bodymen 2 auth0-lock 2 request 2 karma 2 querymen 2 @budibase/backend-core 2 node-sass 2 @intlify/core 2 exifreader 2 zx 2 mapbox.js 2 lodash.unset 2 @enderfga/claw-orchestrator 2 aws-cdk 2 @payloadcms/next 2 @samanhappy/mcphub 2 i18next 2 @strapi/plugin-users-permissions 2 matrix-appservice-bridge 2 mcp-server-kubernetes 2 @nuxt/webpack-builder 2 @dicebear/core 2

https://github.com/directus/directus 24 https://github.com/tinymce/tinymce 14 https://github.com/strapi/strapi 13 https://github.com/OpenZeppelin/openzeppelin-contracts 12 https://github.com/vitejs/vite 11 https://github.com/electron/electron 11 https://github.com/TryGhost/Ghost 10 https://github.com/vercel/next.js 10 https://github.com/ckeditor/ckeditor4 10 https://github.com/backstage/backstage 10 https://github.com/laurent22/joplin 10 https://github.com/parse-community/parse-server 8 https://github.com/pandao/editor.md 8 https://github.com/FlowiseAI/Flowise 8 https://github.com/swagger-api/swagger-ui 8 https://github.com/louislam/uptime-kuma 7 https://github.com/nocodb/nocodb 7 https://github.com/n8n-io/n8n 7 https://github.com/twbs/bootstrap 7 https://github.com/vega/vega 7 https://github.com/panva/jose 6 https://github.com/withastro/astro 6 https://github.com/jquery/jquery 6 https://github.com/nodejs/undici 6 https://github.com/NodeBB/NodeBB 6 https://github.com/jquery/jquery-ui 6 https://github.com/matrix-org/matrix-js-sdk 6 https://github.com/ckeditor/ckeditor5 5 https://github.com/KaTeX/KaTeX 5 https://github.com/lobehub/lobe-chat 5 https://github.com/matrix-org/matrix-appservice-irc 5 https://github.com/apostrophecms/sanitize-html 5 https://github.com/evershopcommerce/evershop 5 https://github.com/nextauthjs/next-auth 5 https://github.com/unshiftio/url-parse 5 https://github.com/honojs/hono 5 https://github.com/markedjs/marked 4 https://github.com/matrix-org/matrix-react-sdk 4 https://github.com/DIYgod/RSSHub 4 https://github.com/mermaid-js/mermaid 4 https://github.com/AmauriC/tarteaucitron.js 4 https://github.com/keystonejs/keystone 4 https://github.com/basecamp/trix 4 https://github.com/Dogfalo/materialize 4 https://github.com/apollographql/apollo-server 4 https://github.com/aws/aws-cdk 4 https://github.com/cure53/DOMPurify 3 https://github.com/haxtheweb/issues 3 https://github.com/postcss/postcss 3 https://github.com/nuxt/nuxt 3 https://github.com/validatorjs/validator.js 3 https://github.com/medialize/uri.js 3 https://github.com/vanessa219/vditor 3 https://github.com/follow-redirects/follow-redirects 3 https://github.com/docsifyjs/docsify 3 https://github.com/nodemailer/nodemailer 3 https://github.com/sequelize/sequelize 3 https://github.com/cloudflare/workers-sdk 3 https://github.com/intlify/vue-i18n 3 https://github.com/sebhildebrandt/systeminformation 3 https://github.com/jarofghosts/glance 3 https://github.com/eclipse-theia/theia 3 https://github.com/lodash/lodash 3 https://github.com/renovatebot/renovate 3 https://github.com/Escape-Technologies/graphql-armor 3 https://github.com/medialize/URI.js 3 https://github.com/saltcorn/saltcorn 3 https://github.com/xCss/Valine 3 https://github.com/angular/angular.js 3 https://github.com/ionicabizau/parse-url 3 https://github.com/YMFE/yapi 3 https://github.com/jasonraimondi/url-to-png 3 https://github.com/hapijs/hapi 3 https://github.com/karma-runner/karma 2 https://github.com/sidorares/node-mysql2 2 https://github.com/caolan/forms 2 https://github.com/mde/ejs 2 https://github.com/froala/wysiwyg-editor 2 https://github.com/josdejong/jsoneditor 2 https://github.com/expressjs/express 2 https://github.com/Vanessa219/vditor 2 https://github.com/MrRio/jsPDF 2 https://github.com/i18next/i18next 2 https://github.com/better-auth/better-auth 2 https://github.com/OpenC3/cosmos 2 https://github.com/ai/nanoid 2 https://github.com/matrix-org/matrix-appservice-bridge 2 https://github.com/highlightjs/highlight.js 2 https://github.com/Finastra/finastra-nodejs-libs 2 https://github.com/koajs/koa 2 https://github.com/guardian/html-janitor 2 https://github.com/vriteio/vrite 2 https://github.com/psi-4ward/psitransfer 2 https://github.com/jameswlane/status-board 2 https://github.com/erxes/erxes 2 https://github.com/pnpm/pnpm 2 https://github.com/socketio/socket.io 2 https://github.com/summernote/summernote 2 https://github.com/koush/scrypted 2 https://github.com/pugjs/pug 2 https://github.com/auth0/nextjs-auth0 2 https://github.com/apostrophecms/apostrophe 2 https://github.com/sass/node-sass 2 https://github.com/manuelstofer/json-pointer 2 https://github.com/rvagg/bl 2 https://github.com/ua-parser/uap-core 2 https://github.com/yahoo/serialize-javascript 2 https://github.com/gatsbyjs/gatsby 2 https://github.com/webpack/webpack-dev-server 2 https://github.com/mozilla/nunjucks 2 https://github.com/sveltejs/svelte 2 https://github.com/cloudflare/workers-oauth-provider 2 https://github.com/axios/axios 2 https://github.com/Urigo/graphql-mesh 2 https://github.com/zcaceres/markdownify-mcp 2 https://github.com/VulnSageAgent/PoCs 2 https://github.com/braintree/sanitize-url 2 https://github.com/vendure-ecommerce/vendure 2 https://github.com/getsentry/sentry-javascript 2 https://github.com/xmldom/xmldom 2 https://github.com/AhmedAdelFahim/express-xss-sanitizer 2 https://github.com/auth0/node-jsonwebtoken 2 https://github.com/excalidraw/excalidraw 2 https://github.com/chimurai/http-proxy-middleware 2 https://github.com/zeit/next.js 2 https://github.com/keycloak/keycloak-nodejs-connect 2 https://github.com/nearform/fast-jwt 2 https://github.com/chocobozzz/peertube 2 https://github.com/openpgpjs/openpgpjs 2 https://github.com/freshfish-hust/my-cves 2 https://github.com/umbraco/Umbraco-CMS 2 https://github.com/salesforce/tough-cookie 2 https://github.com/moxiecode/plupload 2 https://github.com/adobe/css-tools 2 https://github.com/google/closure-library 2 https://github.com/socketio/engine.io 2 https://github.com/firebase/firebase-js-sdk 2 https://github.com/nasa/openmct 2 https://github.com/payloadcms/payload 2 https://github.com/jellyfin/jellyfin-web 2 https://github.com/GoogleChrome/rendertron 2 https://github.com/parse-community/Parse-SDK-JS 2 https://github.com/facebook/react 2 https://github.com/dahlia/fedify 2 https://github.com/request/request 2 https://github.com/quilljs/quill 2 https://github.com/givanz/VvvebJs 2 https://github.com/digitalbazaar/forge 2 https://github.com/mysqljs/mysql 2 https://github.com/isaacs/node-tar 2 https://github.com/punkave/sanitize-html 2 https://github.com/auth0/lock 2 https://github.com/nestjs/nest 2 https://github.com/kjur/jsrsasign 2 https://github.com/fastify/fastify 2 https://github.com/Stuk/jszip 2 https://github.com/visjs/vis-timeline 1 https://github.com/claviska/jquery-minicolors 1 https://github.com/SxB64/mxgraph-xss-vul 1 https://github.com/TypedProject/tsed 1 https://github.com/vitaly-t/pg-promise 1 https://github.com/PebbleRoad/glossarizer 1 https://github.com/mbloch/mapshaper 1 https://github.com/microlinkhq/metascraper 1 https://github.com/Formstone/Formstone 1 https://github.com/bmeck/node-cookiejar 1 https://github.com/hkglue/simditor_demo 1 https://github.com/google/zx 1 https://github.com/node-red/node-red-dashboard 1 https://github.com/readthedocs/readthedocs.org 1 https://github.com/ericnorris/striptags 1 https://github.com/lovell/sharp 1 https://github.com/meteor/meteor 1 https://github.com/layui/layui 1 https://github.com/mongodb/js-bson 1 https://github.com/gchq/CyberChef 1 https://github.com/nhn/tui.grid 1 https://github.com/rollbar/rollbar.js 1 https://github.com/node-fetch/node-fetch 1 https://github.com/epeli/underscore.string 1 https://github.com/diegohaz/querymen 1 https://github.com/blakeembrey/js-template 1 https://github.com/monsterkodi/sds 1 https://github.com/webtorrent/webtorrent 1 https://github.com/JacksonTian/anywhere 1 https://github.com/webpack/webpack 1 https://github.com/jquery-validation/jquery-validation 1 https://github.com/sparksuite/simplemde-markdown-editor 1 https://github.com/diegohaz/bodymen 1 https://github.com/ethanent/phin 1 https://github.com/alchemyplatform/aa-sdk 1 https://github.com/ng-packagr/ng-packagr 1 https://github.com/snyk/broker 1 https://github.com/duzun/URL.js 1 https://github.com/highlight/highlight 1 https://github.com/vercel/ms 1 https://github.com/brianloveswords/base64url 1 https://github.com/jaredly/hexo-admin 1 https://github.com/morrisjs/morris.js 1