High 2,655 Moderate 2,323 Critical 1,306 Low 418 Medium 1

openclaw 217 n8n 53 flowise 49 parse-server 49 next 26 @budibase/server 25 @anthropic-ai/claude-code 22 directus 19 axios 18 electron 17 pnpm 14 tar 14 better-auth 13 react-router 11 @haxtheweb/haxcms-nodejs 10 systeminformation 10 fuxa-server 10 handlebars 10 jspdf 9 node-forge 9 open-webui 9 undici 9 flowise-components 9 liquidjs 8 ghost 8 multer 8 hono 7 @strapi/strapi 7 sequelize 7 jsrsasign 7 nocodb 7 vm2 7 vite 7 react-server-dom-webpack 6 @openzeppelin/contracts 6 fast-xml-parser 6 @sveltejs/kit 6 npm 6 @hulumi/policies 6 astro 6 strapi 6 protobufjs 6 @angular/platform-server 6 open-webui 6 n8n-mcp 6 react-server-dom-parcel 6 matrix-js-sdk 6 react-server-dom-turbopack 6 express-cart 6 @xmldom/xmldom 5 @fedify/fedify 5 shescape 5 ua-parser-js 5 minimatch 5 apostrophe 5 xmldom 5 fastify 5 swagger-typescript-api 5 serve 5 @tinacms/cli 5 tinymce 5 marked 5 auth0-js 5 simple-git 5 @openzeppelin/contracts-upgradeable 5 @angular/common 5 muhammara 5 praisonai 5 seroval 5 clawdbot 5 openpgp 4 matrix-react-sdk 4 @strapi/plugin-users-permissions 4 @vitejs/plugin-rsc 4 fast-uri 4 @frangoteam/fuxa 4 path-to-regexp 4 qs 4 electerm 4 ckeditor4 4 basic-ftp 4 next-auth 4 @backstage/plugin-scaffolder-backend 4 @apollo/gateway 4 hapi 4 @uppy/companion 4 @angular/core 4 generator-jhipster 4 budibase 4 signalk-server 4 yarn 4 total.js 4 devalue 4 kysely 4 prismjs 4 @finos/git-proxy 4 ws 4 sillytavern 4 tar-fs 4 @tinacms/graphql 4 meshcentral 3 node-opcua 3 aws-iot-device-sdk-v2 3 payload 3 mermaid 3 moment 3 rendertron 3 @adonisjs/bodyparser 3 i18next-http-middleware 3 dssrf 3 brace-expansion 3 @clerk/fastify 3 hermes-engine 3 @saltcorn/server 3 highcharts 3 passport-wsfed-saml2 3 software.amazon.awssdk.iotdevicesdk:aws-iot-device-sdk 3 immutable 3 localhost-now 3 steal 3 @better-auth/oauth-provider 3 @feathersjs/authentication-oauth 3 remarkable 3 ids-enterprise 3 h3 3 mcp-server-kubernetes 3 @fastify/middie 3 mathjs 3 @hapi/content 3 network-ai 3 engine.io 3 @oneuptime/common 3 TinyMCE 3 oneuptime 3 @clerk/backend 3 @grpc/grpc-js 3 @clerk/express 3 tinacms 3 @evershop/evershop 3 tinymce/tinymce 3 ecstatic 3 @modelcontextprotocol/sdk 3 keystone 3 @commercial/subtext 3 @nestjs/platform-fastify 3 @paperclipai/server 3 protobufjs-cli 3 js-yaml 3 dompurify 3 multiparty 3 awsiotsdk 3 @evomap/evolver 3 angular 3 mongoose 3 convert-svg-core 3 flatted 2 aws-cdk-lib 2 squirrelly 2 @perfood/couch-auth 2 @nubosoftware/node-static 2 glob-parent 2 @clerk/react-router 2 @auth0/nextjs-auth0 2 linkify-it 2 @theia/ai-code-completion 2 @fastify/multipart 2 is-svg 2 postiz 2 code-server 2 @opennextjs/cloudflare 2 nuxt 2 apollo-server 2 detect-character-encoding 2 cached-path-relative 2 decal 2 @angular/compiler 2 @npmcli/arborist 2 @kindspells/astro-shield 2 @siteboon/claude-code-ui 2 validator 2 pdfjs-dist 2 sharp 2 http-proxy 2 @mobilenext/mobile-mcp 2 semver 2 find-my-way 2 js-toml 2 @theia/ai-chat-ui 2 thrift 2 @typebot.io/js 2 dojo 2 lodash.mergewith 2 loader-utils 2 matrix-appservice-irc 2 @dicebear/converter 2 angular-expressions 2 rollup 2 studiocms 2 @budibase/backend-core 2 tiny-secp256k1 2

https://github.com/parse-community/parse-server 17 https://github.com/electron/electron 12 https://github.com/directus/directus 12 https://github.com/strapi/strapi 11 https://github.com/FlowiseAI/Flowise 10 https://github.com/anthropics/claude-code 9 https://github.com/vercel/next.js 9 https://github.com/backstage/backstage 8 https://github.com/sequelize/sequelize 6 https://github.com/OpenZeppelin/openzeppelin-contracts 6 https://github.com/npm/node-tar 6 https://github.com/matrix-org/matrix-js-sdk 6 https://github.com/n8n-io/n8n 5 https://github.com/axios/axios 5 https://github.com/BlackFan/client-side-prototype-pollution 5 https://github.com/faisalman/ua-parser-js 5 https://github.com/sebhildebrandt/systeminformation 5 https://github.com/haxtheweb/issues 5 https://github.com/finos/git-proxy 4 https://github.com/jhipster/generator-jhipster 4 https://github.com/node-opcua/node-opcua 4 https://github.com/mafintosh/tar-fs 4 https://github.com/PrismJS/prism 4 https://github.com/saltcorn/saltcorn 4 https://github.com/npm/cli 4 https://github.com/ckeditor/ckeditor4 4 https://github.com/expressjs/multer 4 https://github.com/totaljs/framework 4 https://github.com/ericcornelissen/shescape 4 https://github.com/matrix-org/matrix-react-sdk 4 https://github.com/open-webui/open-webui 4 https://github.com/nocodb/nocodb 4 https://github.com/openpgpjs/openpgpjs 4 https://github.com/apollographql/federation 3 https://github.com/digitalbazaar/forge 3 https://github.com/Ylianst/MeshCentral 3 https://github.com/kjur/jsrsasign 3 https://github.com/jonschlinkert/remarkable 3 https://github.com/facebook/hermes 3 https://github.com/stealjs/steal 3 https://github.com/sveltejs/kit 3 https://github.com/cure53/DOMPurify 3 https://github.com/infor-design/enterprise-ng 3 https://github.com/auth0/passport-wsfed-saml2 3 https://github.com/better-auth/better-auth 3 https://github.com/nextauthjs/next-auth 3 https://github.com/handlebars-lang/handlebars.js 3 https://github.com/keystonejs/keystone 3 https://github.com/balderdashy/sails 3 https://github.com/npm/npm 3 https://github.com/udecode/plate 3 https://github.com/highcharts/highcharts 3 https://github.com/fastify/fastify 3 https://github.com/aws/aws-iot-device-sdk-java-v2 3 https://github.com/moment/moment 3 https://github.com/ofirdagan/cross-domain-local-storage 3 https://github.com/mozilla/pdf.js 3 https://github.com/hapijs/subtext 3 https://github.com/Marak/colors.js 3 https://github.com/mrvautin/expressCart 3 https://github.com/vitejs/vite 3 https://github.com/steveukx/git-js 3 https://github.com/transloadit/uppy 3 https://github.com/jfhbrook/node-ecstatic 3 https://github.com/gatsbyjs/gatsby 3 https://github.com/withastro/astro 3 https://github.com/yarnpkg/yarn 3 https://github.com/GoogleChrome/rendertron 3 https://github.com/remix-run/react-router 3 https://github.com/TryGhost/Ghost 3 https://github.com/fastify/fastify-multipart 3 https://github.com/louislam/uptime-kuma 2 https://github.com/mozilla/node-convict 2 https://github.com/beerpwn/CVE 2 https://github.com/johannschopplich/nuxt-api-party 2 https://github.com/418sec/json-ptr 2 https://github.com/tinacms/tinacms 2 https://github.com/sindresorhus/is-svg 2 https://github.com/eta-dev/eta 2 https://github.com/pillarjs/path-to-regexp 2 https://github.com/ag-grid/ag-grid 2 https://github.com/ebradyjobory/finance.js 2 https://github.com/cloudhead/node-static 2 https://github.com/strikeentco/set 2 https://github.com/npm/arborist 2 https://github.com/squirrellyjs/squirrelly 2 https://github.com/bitcoinjs/tiny-secp256k1 2 https://github.com/nuxt/nuxt 2 https://github.com/debug-js/debug 2 https://github.com/TryGhost/node-sqlite3 2 https://github.com/adaltas/node-mixme 2 https://github.com/immerjs/immer 2 https://github.com/plone/volto 2 https://github.com/clientIO/joint 2 https://github.com/matrix-org/matrix-appservice-irc 2 https://github.com/neocotic/convert-svg 2 https://github.com/erxes/erxes 2 https://github.com/electron-userland/electron-builder 2 https://github.com/rabobank-blockchain/vp-toolkit 2 https://github.com/peerigon/angular-expressions 2 https://github.com/parallax/jsPDF 2 https://github.com/dojo/dojo 2 https://github.com/julianhille/MuhammaraJS 2 https://github.com/OrangeShieldInfos/PoCs 2 https://github.com/nodejs/undici 2 https://github.com/websockets/ws 2 https://github.com/fb55/css-what 2 https://github.com/jquery-validation/jquery-validation 2 https://github.com/auth0/nextjs-auth0 2 https://github.com/vivaxy/here 2 https://github.com/evershopcommerce/evershop 2 https://github.com/sonicdoe/detect-character-encoding 2 https://github.com/hapijs/hoek 2 https://github.com/oauthjs/node-oauth2-server 2 https://github.com/pnpm/pnpm 2 https://github.com/ashaffer/cached-path-relative 2 https://github.com/gigafied/decal.js 2 https://github.com/mout/mout 2 https://github.com/VulnSphere/LLMVulnSphere 2 https://github.com/webpack/loader-utils 2 https://github.com/ljharb/qs 2 https://github.com/galkahana/HummusJS 2 https://github.com/socketio/engine.io 2 https://github.com/solana-labs/solana-web3.js 2 https://github.com/discordjs/opus 2 https://github.com/apollographql/apollo-server 2 https://github.com/cisco/node-jose 2 https://github.com/gruntjs/grunt 2 https://github.com/jonschlinkert/assign-deep 2 https://github.com/eclipse-theia/theia 2 https://github.com/dimpu/ngx-md 2 https://github.com/modelcontextprotocol/servers 2 https://github.com/b-heilman/bmoor 2 https://github.com/mariocasciaro/object-path 2 https://github.com/VulnSageAgent/PoCs 2 https://github.com/cube-js/cube.js 2 https://github.com/markedjs/marked 2 https://github.com/DCKT/localhost-now 2 https://github.com/NaturalIntelligence/fast-xml-parser 2 https://github.com/DIYgod/RSSHub 2 https://github.com/chjj/marked 2 https://github.com/ariabuckles/simple-markdown 2 https://github.com/honojs/hono 2 https://github.com/Starcounter-Jack/JSON-Patch 1 https://github.com/koush/scrypted 1 https://github.com/PostHog/posthog 1 https://github.com/greensock/GSAP 1 https://github.com/robinbuschmann/sequelize-typescript 1 https://github.com/gulpjs/copy-props 1 https://github.com/christian-bromann/rgb2hex 1 https://github.com/richardgirges/express-fileupload 1 https://github.com/riot/compiler 1 https://github.com/prisma/prisma 1 https://github.com/pkrumins/node-tree-kill 1 https://github.com/executeautomation/mcp-database-server 1 https://github.com/advanced-rest-client/arc-electron 1 https://github.com/angular/angular 1 https://github.com/MetaMask/eth-ledger-bridge-keyring 1 https://github.com/soketi/soketi 1 https://github.com/laverdet/isolated-vm 1 https://github.com/rejetto/hfs 1 https://github.com/SocketDev/security-research 1 https://github.com/75lb/deep-merge 1 https://github.com/zeit/serve-handler 1 https://github.com/ionic-team/ionic 1 https://github.com/Venemo/node-lmdb 1 https://github.com/stampit-org/supermixer 1 https://github.com/stefanjudis/is-http2 1 https://github.com/JstnMcBrd/dectalk-tts 1 https://github.com/moment/luxon 1 https://github.com/indexzero/TimeSpan.js 1 https://github.com/hokaccha/node-jwt-simple 1 https://github.com/angular/angular-cli 1 https://github.com/mozilla/hawk 1 https://github.com/NodeRedis/node-redis 1 https://github.com/npm/ssri 1 https://github.com/jwadhams/json-logic-js 1 https://github.com/ziahamza/webui-aria2 1 https://github.com/segmentio/is-email 1 https://github.com/getsentry/sentry-javascript 1 https://github.com/youzan/vant 1 https://github.com/henrytseng/hostr 1 https://github.com/modelcontextprotocol/inspector 1 https://github.com/p1ckzi/CVE-2022-35513 1 https://github.com/snowyu/git-commiters.js 1 https://github.com/xtermjs/xterm.js 1 https://github.com/ikrong/domain-suffix 1 https://github.com/image-size/image-size 1 https://github.com/cronvel/tree-kit 1 https://github.com/dcodeIO/ClosureCompiler.js 1 https://github.com/kobezzza/Collection 1 https://github.com/node-fetch/node-fetch 1 https://github.com/OneUptime/oneuptime 1 https://github.com/nowk/serc.js 1 https://github.com/mongodb/js-bson 1 https://github.com/zcaceres/markdownify-mcp 1 https://github.com/fastify/fastify-passport 1 https://github.com/edmundhung/conform 1 https://github.com/unshiftio/querystringify 1