
npm
5,164,451 packages · npmjs.org
Moderate Security Advisories for https://github.com/highlight/highlight in npm Clear Filters
Moderate
over 2 years ago
html inputs of type password recorded in plaintext when converted to text inputs
npm
highlight.run
Filter by Severity
Filter by Package
directus
23
tinymce
14
next
12
@openzeppelin/contracts
11
ckeditor4
11
tinymce/tinymce
11
ghost
11
@openzeppelin/contracts-upgradeable
11
TinyMCE
11
joplin
10
vite
10
electron
10
angular
9
swagger-ui
8
editor.md
8
parse-server
8
n8n
7
nocodb
7
sanitize-html
7
validator
7
marked
7
nodebb
7
undici
6
matrix-js-sdk
6
uptime-kuma
6
vega
6
url-parse
6
urijs
6
bootstrap
6
flowise
6
snyk-broker
6
jquery-ui
6
matrix-appservice-irc
5
vditor
5
twbs/bootstrap
5
bootstrap
5
froala-editor
5
@lobehub/chat
5
katex
5
org.webjars.npm:jquery-ui
5
jquery
5
org.webjars:bootstrap
5
jQuery.UI.Combined
5
bootstrap-sass
5
tarteaucitronjs
5
@evershop/evershop
5
jQuery
4
@directus/api
4
hono
4
bootstrap
4
astro
4
glance
4
vega-functions
4
dompurify
4
materialize-css
4
trix
4
serve
4
mermaid
4
bootstrap-sass
4
matrix-react-sdk
4
rsshub
4
yui
4
org.webjars.npm:jquery
3
renovate
3
sequelize
3
docsify
3
express
3
dojo
3
follow-redirects
3
jose-node-cjs-runtime
3
xlsx
3
@jmondi/url-to-png
3
mattermost-desktop
3
m-server
3
systeminformation
3
jose-node-esm-runtime
3
@saltcorn/server
3
@materializecss/materialize
3
@ckeditor/ckeditor5-markdown-gfm
3
yapi-vendor
3
moodle/moodle
3
parse-url
3
public
3
@intlify/vue-i18n-core
3
vue-i18n
3
valine
3
jquery-ui-rails
3
strapi
3
next-auth
3
mysql
3
layui
3
apollo-server-core
3
petite-vue-i18n
3
postcss
3
bootstrap.sass
3
hapi
3
statics-server
3
jose
3
@cloudflare/workers-oauth-provider
2
bl
2
jodit
2
@umbraco-cms/backoffice
2
prismjs
2
axios
2
bodymen
2
rendertron
2
lodash-rails
2
@directus/storage-driver-s3
2
json-pointer
2
quill
2
serialize-javascript
2
sockjs
2
forms
2
@strapi/admin
2
mapbox.js
2
summernote
2
@intlify/core-base
2
saml2-js
2
mxgraph
2
engine.io
2
jsonwebtoken
2
express-xss-sanitizer
2
erxes
2
stimulsoft-dashboards-js
2
parse
2
bootbox
2
harp
2
jellyfin-web
2
payload
2
webpack-dev-server
2
@astrojs/node
2
connect
2
openc3
2
simple-markdown
2
simplehttpserver
2
express-gateway
2
nodemailer
2
simditor
2
@escape.tech/graphql-armor-max-depth
2
@auth0/nextjs-auth0
2
nunjucks
2
@strapi/utils
2
Umbraco.Cms.StaticAssets
2
pnpm
2
karma
2
aws-cdk-lib
2
i18next
2
jsoneditor
2
@vrite/sdk
2
@intlify/core
2
google-closure-library
2
apollo-server
2
mongo-express
2
mcp-markdownify-server
2
@payloadcms/next
2
@strapi/plugin-content-manager
2
nanoid
2
converse.js
2
element-plus
2
aws-cdk
2
@finastra/nestjs-proxy
2
mysql2
2
@excalidraw/excalidraw
2
http-proxy-middleware
2
jsrsasign
2
keystone
2
jspdf
2
reveal.js
2
gitbook
2
@builder.io/qwik
2
fastify
2
matrix-appservice-bridge
2
wrangler
2
lodash
2
jszip
2
@strapi/strapi
2
fast-jwt
2
@backstage/techdocs-common
2
svelte
2
@payloadcms/graphql
2
request
2
jose-browser-runtime
2
lodash-es
2
psitransfer
2
openmct
2
pug
2
html-janitor
2
tough-cookie
2
xmldom
2
auth0-lock
2
@openc3/tool-common
2
handlebars
2
http-file-server
2
socket.io
2
openpgp
2
keycloak-connect
2
querymen
2
@adobe/css-tools
2
swagger-ui-dist
2
notevil
2
Filter by Repository
https://github.com/directus/directus
24
https://github.com/tinymce/tinymce
14
https://github.com/OpenZeppelin/openzeppelin-contracts
11
https://github.com/electron/electron
11
https://github.com/strapi/strapi
11
https://github.com/laurent22/joplin
10
https://github.com/backstage/backstage
10
https://github.com/ckeditor/ckeditor4
10
https://github.com/TryGhost/Ghost
10
https://github.com/vercel/next.js
10
https://github.com/vitejs/vite
10
https://github.com/pandao/editor.md
8
https://github.com/parse-community/parse-server
8
https://github.com/nocodb/nocodb
7
https://github.com/n8n-io/n8n
7
https://github.com/jquery/jquery
7
https://github.com/swagger-api/swagger-ui
7
https://github.com/vega/vega
7
https://github.com/panva/jose
6
https://github.com/NodeBB/NodeBB
6
https://github.com/louislam/uptime-kuma
6
https://github.com/FlowiseAI/Flowise
6
https://github.com/matrix-org/matrix-js-sdk
6
https://github.com/nodejs/undici
6
https://github.com/evershopcommerce/evershop
5
https://github.com/apostrophecms/sanitize-html
5
https://github.com/KaTeX/KaTeX
5
https://github.com/matrix-org/matrix-appservice-irc
5
https://github.com/jquery/jquery-ui
5
https://github.com/ckeditor/ckeditor5
5
https://github.com/withastro/astro
5
https://github.com/unshiftio/url-parse
5
https://github.com/lobehub/lobe-chat
5
https://github.com/aws/aws-cdk
4
https://github.com/AmauriC/tarteaucitron.js
4
https://github.com/matrix-org/matrix-react-sdk
4
https://github.com/apollographql/apollo-server
4
https://github.com/DIYgod/RSSHub
4
https://github.com/keystonejs/keystone
4
https://github.com/nextauthjs/next-auth
4
https://github.com/markedjs/marked
4
https://github.com/mermaid-js/mermaid
4
https://github.com/basecamp/trix
4
https://github.com/honojs/hono
4
https://github.com/twbs/bootstrap
4
https://github.com/Dogfalo/materialize
4
https://github.com/haxtheweb/issues
3
https://github.com/Escape-Technologies/graphql-armor
3
https://github.com/cloudflare/workers-sdk
3
https://github.com/jasonraimondi/url-to-png
3
https://github.com/postcss/postcss
3
https://github.com/angular/angular.js
3
https://github.com/froala/wysiwyg-editor
3
https://github.com/follow-redirects/follow-redirects
3
https://github.com/jarofghosts/glance
3
https://github.com/ionicabizau/parse-url
3
https://github.com/medialize/uri.js
3
https://github.com/sebhildebrandt/systeminformation
3
https://github.com/hapijs/hapi
3
https://github.com/cure53/DOMPurify
3
https://github.com/sequelize/sequelize
3
https://github.com/saltcorn/saltcorn
3
https://github.com/YMFE/yapi
3
https://github.com/nuxt/nuxt
3
https://github.com/medialize/URI.js
3
https://github.com/eclipse-theia/theia
3
https://github.com/renovatebot/renovate
3
https://github.com/intlify/vue-i18n
3
https://github.com/xCss/Valine
3
https://github.com/docsifyjs/docsify
3
https://github.com/vanessa219/vditor
3
https://github.com/socketio/socket.io
2
https://github.com/salesforce/tough-cookie
2
https://github.com/ai/nanoid
2
https://github.com/payloadcms/payload
2
https://github.com/quilljs/quill
2
https://github.com/psi-4ward/psitransfer
2
https://github.com/adobe/css-tools
2
https://github.com/mysqljs/mysql
2
https://github.com/Khan/simple-markdown
2
https://github.com/vriteio/vrite
2
https://github.com/jameswlane/status-board
2
https://github.com/mozilla/nunjucks
2
https://github.com/auth0/node-jsonwebtoken
2
https://github.com/AhmedAdelFahim/express-xss-sanitizer
2
https://github.com/josdejong/jsoneditor
2
https://github.com/summernote/summernote
2
https://github.com/karma-runner/karma
2
https://github.com/highlightjs/highlight.js
2
https://github.com/digitalbazaar/forge
2
https://github.com/freshfish-hust/my-cves
2
https://github.com/erxes/erxes
2
https://github.com/xmldom/xmldom
2
https://github.com/nodemailer/nodemailer
2
https://github.com/Finastra/finastra-nodejs-libs
2
https://github.com/umbraco/Umbraco-CMS
2
https://github.com/braintree/sanitize-url
2
https://github.com/jellyfin/jellyfin-web
2
https://github.com/validatorjs/validator.js
2
https://github.com/Urigo/graphql-mesh
2
https://github.com/zeit/next.js
2
https://github.com/Stuk/jszip
2
https://github.com/moxiecode/plupload
2
https://github.com/koush/scrypted
2
https://github.com/VulnSageAgent/PoCs
2
https://github.com/guardian/html-janitor
2
https://github.com/nasa/openmct
2
https://github.com/matrix-org/matrix-appservice-bridge
2
https://github.com/sass/node-sass
2
https://github.com/MrRio/jsPDF
2
https://github.com/fastify/fastify
2
https://github.com/zcaceres/markdownify-mcp
2
https://github.com/sidorares/node-mysql2
2
https://github.com/kjur/jsrsasign
2
https://github.com/auth0/lock
2
https://github.com/GoogleChrome/rendertron
2
https://github.com/axios/axios
2
https://github.com/OpenC3/cosmos
2
https://github.com/pugjs/pug
2
https://github.com/firebase/firebase-js-sdk
2
https://github.com/caolan/forms
2
https://github.com/manuelstofer/json-pointer
2
https://github.com/mde/ejs
2
https://github.com/gatsbyjs/gatsby
2
https://github.com/nestjs/nest
2
https://github.com/punkave/sanitize-html
2
https://github.com/apostrophecms/apostrophe
2
https://github.com/getsentry/sentry-javascript
2
https://github.com/google/closure-library
2
https://github.com/auth0/nextjs-auth0
2
https://github.com/vendure-ecommerce/vendure
2
https://github.com/webpack/webpack-dev-server
2
https://github.com/lodash/lodash
2
https://github.com/pnpm/pnpm
2
https://github.com/nearform/fast-jwt
2
https://github.com/dahlia/fedify
2
https://github.com/excalidraw/excalidraw
2
https://github.com/ua-parser/uap-core
2
https://github.com/rvagg/bl
2
https://github.com/openpgpjs/openpgpjs
2
https://github.com/sveltejs/svelte
2
https://github.com/keycloak/keycloak-nodejs-connect
2
https://github.com/yahoo/serialize-javascript
2
https://github.com/facebook/react
2
https://github.com/request/request
2
https://github.com/socketio/engine.io
2
https://github.com/chimurai/http-proxy-middleware
2
https://github.com/cloudflare/workers-oauth-provider
2
https://github.com/expressjs/express
2
https://github.com/chocobozzz/peertube
2
https://github.com/Vanessa219/vditor
2
https://github.com/i18next/i18next
2
https://github.com/givanz/VvvebJs
2
https://github.com/DapperDuckling/keycloak-connector
1
https://github.com/matthewmueller/dom-iterator
1
https://github.com/aFarkas/lazysizes
1
https://github.com/goauthentik/authentik
1
https://github.com/octokit/request-error.js
1
https://github.com/brianloveswords/base64url
1
https://github.com/Formstone/Formstone
1
https://github.com/ethanent/phin
1
https://github.com/bootboxjs/bootbox
1
https://github.com/dollarshaveclub/shave
1
https://github.com/vitest-dev/vitest
1
https://github.com/fastly/js-compute-runtime
1
https://github.com/RocketChat/Rocket.Chat.Livechat
1
https://github.com/totaljs/cms
1
https://github.com/monsterkodi/sds
1
https://github.com/jquery-validation/jquery-validation
1
https://github.com/antfu/utils
1
https://github.com/isaacs/node-tar
1
https://github.com/polaris-rbx/Polaris-React
1
https://github.com/browserslist/browserslist
1
https://github.com/yoshuawuyts/vmd
1
https://github.com/herber/hekto
1
https://github.com/c3js/c3
1
https://github.com/ibmdb/node-ibm_db
1
https://github.com/quasarframework/quasar-ui-qmarkdown
1
https://github.com/Azure/azure-sdk-for-go
1
https://github.com/octokit/request.js
1
https://github.com/npm/cli
1
https://github.com/ftonato/nope-validator
1
https://github.com/morrisjs/morris.js
1
https://github.com/ag-grid/ag-grid
1
https://github.com/nuxt/devalue
1
https://github.com/oven-sh/bun
1
https://github.com/npm/npm-registry-fetch
1
https://github.com/marcelodolza/iziModal
1
https://github.com/jaredly/hexo-admin
1
https://github.com/Automattic/node-canvas
1
https://github.com/aws/aws-encryption-sdk-javascript
1
https://github.com/eugeneware/jpeg-js
1
https://github.com/googleapis/nodejs-firestore
1
https://github.com/xiboon/kurwov
1
https://github.com/substack/static-eval
1
https://github.com/vitaly-t/pg-promise
1
https://github.com/bypazs/strapi
1
https://github.com/CloudCannon/pagefind
1
https://github.com/mongodb/libmongocrypt
1