High 2,717 Moderate 2,397 Critical 1,323 Low 423 Medium 1

openclaw 300 n8n 62 nocodb 41 parse-server 40 hono 36 directus 34 electron 30 ghost 29 next 28 flowise 24 axios 23 dompurify 19 undici 16 pnpm 14 astro 14 tinymce 14 vite 13 svelte 13 mermaid 12 @openzeppelin/contracts 12 @openzeppelin/contracts-upgradeable 12 tinymce/tinymce 11 TinyMCE 11 renovate 11 ckeditor4 11 bootstrap 10 joplin 10 sanitize-html 9 angular 9 protobufjs 9 @directus/api 8 @sveltejs/kit 8 react-router 8 uptime-kuma 8 nuxt 8 editor.md 8 validator 8 swagger-ui 8 @budibase/server 7 jquery-ui 7 trix 7 tarteaucitronjs 7 org.webjars.npm:jquery-ui 7 @astrojs/node 7 marked 7 nodemailer 7 nodebb 7 snyk-broker 6 url-parse 6 signalk-server 6 liquidjs 6 jQuery.UI.Combined 6 matrix-js-sdk 6 @lobehub/chat 6 vm2 6 @asymmetric-effort/specifyjs 6 h3 6 urijs 6 vega 6 @evershop/evershop 6 jodit 6 webpack-dev-server 6 next-auth 5 lodash 5 tar 5 postcss 5 vditor 5 js-yaml 5 matrix-appservice-irc 5 katex 5 apostrophe 5 payload 5 bootstrap 5 @builder.io/qwik-city 4 rsshub 4 yui 4 re2 4 fast-jwt 4 @anthropic-ai/claude-code 4 glance 4 fastify 4 @hono/node-server 4 handlebars 4 ep_etherpad-lite 4 jspdf 4 serve 4 n8n-mcp 4 froala-editor 4 @saltcorn/server 4 bootstrap-sass 4 sillytavern 4 jquery 4 shescape 4 clawdbot 4 matrix-react-sdk 4 jQuery 4 @auth0/nextjs-auth0 4 studiocms 4 @haxtheweb/haxcms-nodejs 4 lodash-es 4 apollo-server-core 4 network-ai 4 follow-redirects 4 @steipete/summarize 4 materialize-css 4 @actual-app/sync-server 4 @cyclonedx/cdxgen 3 fuxa-server 3 mcp-searxng 3 yapi-vendor 3 fast-xml-parser 3 bootstrap 3 jose-node-esm-runtime 3 xlsx 3 mattermost-desktop 3 @nuxt/webpack-builder 3 @strapi/strapi 3 node-forge 3 markdown-it 3 action_text-trix 3 m-server 3 @fastify/static 3 showdown 3 @perfood/couch-auth 3 jose 3 public 3 systeminformation 3 strapi 3 nuxt-og-image 3 valine 3 @jmondi/url-to-png 3 better-auth 3 http-proxy-middleware 3 @excalidraw/excalidraw 3 layui 3 lodash-amd 3 dojo 3 statics-server 3 flowise-components 3 @pdfme/schemas 3 jquery-ui-rails 3 petite-vue-i18n 3 ip-address 3 @intlify/vue-i18n-core 3 @backstage/techdocs-common 3 @angular/ssr 3 docsify 3 vega-functions 3 serialize-javascript 3 mysql 3 @materializecss/materialize 3 magicmirror 3 vue-i18n 3 @nuxt/rspack-builder 3 @nyariv/sandboxjs 3 langsmith 3 agents 3 sequelize 3 express 3 parse-url 3 @ckeditor/ckeditor5-markdown-gfm 3 @angular/core 3 jose-node-cjs-runtime 3 hapi 3 bootstrap-sass 3 parse 3 moodle/moodle 3 @cloudflare/workers-oauth-provider 2 electerm 2 karma 2 auth0-lock 2 @intlify/core 2 exifreader 2 node-sass 2 lodash.unset 2 @payloadcms/next 2 @adobe/css-tools 2 @samanhappy/mcphub 2 @enderfga/claw-orchestrator 2 aws-cdk 2 zx 2 @strapi/plugin-users-permissions 2 i18next 2 jsoneditor 2 notevil 2 express-gateway 2 mcp-server-kubernetes 2 file-type 2 matrix-appservice-bridge 2 @dynatrace-oss/dynatrace-mcp-server 2 jsonwebtoken 2 ejs 2 @strapi/plugin-content-manager 2 chrome-devtools-mcp 2 @fedify/fedify 2 pug 2 bl 2 mercurius 2 nanoid 2 org.webjars.npm:jquery 2

https://github.com/directus/directus 24 https://github.com/tinymce/tinymce 14 https://github.com/strapi/strapi 13 https://github.com/OpenZeppelin/openzeppelin-contracts 12 https://github.com/electron/electron 11 https://github.com/vitejs/vite 11 https://github.com/backstage/backstage 10 https://github.com/vercel/next.js 10 https://github.com/TryGhost/Ghost 10 https://github.com/ckeditor/ckeditor4 10 https://github.com/laurent22/joplin 10 https://github.com/parse-community/parse-server 8 https://github.com/FlowiseAI/Flowise 8 https://github.com/pandao/editor.md 8 https://github.com/swagger-api/swagger-ui 7 https://github.com/twbs/bootstrap 7 https://github.com/nocodb/nocodb 7 https://github.com/vega/vega 7 https://github.com/n8n-io/n8n 7 https://github.com/louislam/uptime-kuma 7 https://github.com/panva/jose 6 https://github.com/jquery/jquery-ui 6 https://github.com/matrix-org/matrix-js-sdk 6 https://github.com/jquery/jquery 6 https://github.com/NodeBB/NodeBB 6 https://github.com/withastro/astro 6 https://github.com/nodejs/undici 6 https://github.com/KaTeX/KaTeX 5 https://github.com/matrix-org/matrix-appservice-irc 5 https://github.com/lobehub/lobe-chat 5 https://github.com/ckeditor/ckeditor5 5 https://github.com/honojs/hono 5 https://github.com/unshiftio/url-parse 5 https://github.com/nextauthjs/next-auth 5 https://github.com/apostrophecms/sanitize-html 5 https://github.com/evershopcommerce/evershop 5 https://github.com/markedjs/marked 4 https://github.com/apollographql/apollo-server 4 https://github.com/Dogfalo/materialize 4 https://github.com/basecamp/trix 4 https://github.com/AmauriC/tarteaucitron.js 4 https://github.com/aws/aws-cdk 4 https://github.com/keystonejs/keystone 4 https://github.com/mermaid-js/mermaid 4 https://github.com/matrix-org/matrix-react-sdk 4 https://github.com/DIYgod/RSSHub 4 https://github.com/docsifyjs/docsify 3 https://github.com/nodemailer/nodemailer 3 https://github.com/renovatebot/renovate 3 https://github.com/Escape-Technologies/graphql-armor 3 https://github.com/saltcorn/saltcorn 3 https://github.com/jarofghosts/glance 3 https://github.com/postcss/postcss 3 https://github.com/sequelize/sequelize 3 https://github.com/cure53/DOMPurify 3 https://github.com/medialize/uri.js 3 https://github.com/ionicabizau/parse-url 3 https://github.com/intlify/vue-i18n 3 https://github.com/validatorjs/validator.js 3 https://github.com/eclipse-theia/theia 3 https://github.com/sebhildebrandt/systeminformation 3 https://github.com/cloudflare/workers-sdk 3 https://github.com/medialize/URI.js 3 https://github.com/hapijs/hapi 3 https://github.com/angular/angular.js 3 https://github.com/nuxt/nuxt 3 https://github.com/xCss/Valine 3 https://github.com/YMFE/yapi 3 https://github.com/jasonraimondi/url-to-png 3 https://github.com/vanessa219/vditor 3 https://github.com/follow-redirects/follow-redirects 3 https://github.com/haxtheweb/issues 3 https://github.com/lodash/lodash 3 https://github.com/keycloak/keycloak-nodejs-connect 2 https://github.com/sidorares/node-mysql2 2 https://github.com/psi-4ward/psitransfer 2 https://github.com/sveltejs/svelte 2 https://github.com/ai/nanoid 2 https://github.com/pugjs/pug 2 https://github.com/zcaceres/markdownify-mcp 2 https://github.com/VulnSageAgent/PoCs 2 https://github.com/highlightjs/highlight.js 2 https://github.com/kjur/jsrsasign 2 https://github.com/Finastra/finastra-nodejs-libs 2 https://github.com/koajs/koa 2 https://github.com/sass/node-sass 2 https://github.com/vriteio/vrite 2 https://github.com/auth0/lock 2 https://github.com/mozilla/nunjucks 2 https://github.com/getsentry/sentry-javascript 2 https://github.com/nestjs/nest 2 https://github.com/nearform/fast-jwt 2 https://github.com/vendure-ecommerce/vendure 2 https://github.com/erxes/erxes 2 https://github.com/summernote/summernote 2 https://github.com/braintree/sanitize-url 2 https://github.com/socketio/socket.io 2 https://github.com/Urigo/graphql-mesh 2 https://github.com/excalidraw/excalidraw 2 https://github.com/apostrophecms/apostrophe 2 https://github.com/rvagg/bl 2 https://github.com/chimurai/http-proxy-middleware 2 https://github.com/yahoo/serialize-javascript 2 https://github.com/pnpm/pnpm 2 https://github.com/fastify/fastify 2 https://github.com/i18next/i18next 2 https://github.com/koush/scrypted 2 https://github.com/MrRio/jsPDF 2 https://github.com/gatsbyjs/gatsby 2 https://github.com/Vanessa219/vditor 2 https://github.com/webpack/webpack-dev-server 2 https://github.com/cloudflare/workers-oauth-provider 2 https://github.com/expressjs/express 2 https://github.com/Stuk/jszip 2 https://github.com/zeit/next.js 2 https://github.com/jameswlane/status-board 2 https://github.com/axios/axios 2 https://github.com/auth0/nextjs-auth0 2 https://github.com/mde/ejs 2 https://github.com/caolan/forms 2 https://github.com/punkave/sanitize-html 2 https://github.com/quilljs/quill 2 https://github.com/parse-community/Parse-SDK-JS 2 https://github.com/dahlia/fedify 2 https://github.com/request/request 2 https://github.com/auth0/node-jsonwebtoken 2 https://github.com/better-auth/better-auth 2 https://github.com/chocobozzz/peertube 2 https://github.com/digitalbazaar/forge 2 https://github.com/mysqljs/mysql 2 https://github.com/openpgpjs/openpgpjs 2 https://github.com/isaacs/node-tar 2 https://github.com/josdejong/jsoneditor 2 https://github.com/firebase/firebase-js-sdk 2 https://github.com/moxiecode/plupload 2 https://github.com/froala/wysiwyg-editor 2 https://github.com/givanz/VvvebJs 2 https://github.com/freshfish-hust/my-cves 2 https://github.com/umbraco/Umbraco-CMS 2 https://github.com/karma-runner/karma 2 https://github.com/salesforce/tough-cookie 2 https://github.com/adobe/css-tools 2 https://github.com/socketio/engine.io 2 https://github.com/nasa/openmct 2 https://github.com/payloadcms/payload 2 https://github.com/matrix-org/matrix-appservice-bridge 2 https://github.com/xmldom/xmldom 2 https://github.com/AhmedAdelFahim/express-xss-sanitizer 2 https://github.com/facebook/react 2 https://github.com/OpenC3/cosmos 2 https://github.com/google/closure-library 2 https://github.com/GoogleChrome/rendertron 2 https://github.com/guardian/html-janitor 2 https://github.com/jellyfin/jellyfin-web 2 https://github.com/sparksuite/simplemde-markdown-editor 1 https://github.com/fastify/fastify-passport 1 https://github.com/diegohaz/bodymen 1 https://github.com/monsterkodi/sds 1 https://github.com/Yonle/bostr 1 https://github.com/snyk/broker 1 https://github.com/alchemyplatform/aa-sdk 1 https://github.com/JacksonTian/anywhere 1 https://github.com/duzun/URL.js 1 https://github.com/domenic/svg2png 1 https://github.com/garycourt/uri-js 1 https://github.com/solid/identity-token-verifier 1 https://github.com/highlight/highlight 1 https://github.com/10uei011/git-shallow-clone 1 https://github.com/senchalabs/connect 1 https://github.com/cisco/node-jose 1 https://github.com/easy-team/easywebpack-cli 1 https://github.com/margox/braft-editor 1 https://github.com/IdoPesok/zsa 1 https://github.com/actualbudget/actual 1 https://github.com/johndyer/mediaelement 1 https://github.com/hapijs/formula 1 https://github.com/marmelab/react-admin 1 https://github.com/happyworm/jPlayer 1 https://github.com/messageformat/messageformat 1 https://github.com/jitbit/HtmlSanitizer 1 https://github.com/stevemao/trim-off-newlines 1 https://github.com/webpack/webpack 1 https://github.com/patriksimek/vm2 1 https://github.com/SxB64/mxgraph-xss-vul 1 https://github.com/thi-ng/umbrella 1 https://github.com/webtorrent/webtorrent 1 https://github.com/RocketChat/Rocket.Chat.Livechat 1 https://github.com/silverbucket/webfinger.js 1 https://github.com/aws/aws-iot-device-sdk-java-v2 1 https://github.com/snyk/cli 1 https://github.com/layui/layui 1 https://github.com/mongodb/js-bson 1 https://github.com/nhn/tui.grid 1 https://github.com/magynhard/curly-bracket-parser 1 https://github.com/blakeembrey/js-template 1 https://github.com/lirantal/lockfile-lint 1 https://github.com/jhipster/jhipster-kotlin 1 https://github.com/node-fetch/node-fetch 1 https://github.com/jgraph/mxgraph 1