An open API service providing security vulnerability metadata for many open source software ecosystems.

Moderate
8 days ago

MCP TypeScript SDK: Server bearer authentication accepted tokens issued for another service GSA_kwCzR0hTQS1ydnE1LXd3cXYtNzhwcc4AB-fi

npm @modelcontextprotocol/server-legacy, @modelcontextprotocol/express, @modelcontextprotocol/server, @modelcontextprotocol/sdk
Moderate
8 days ago

ApostropheCMS: CAPTCHA response token not URL-encoded GSA_kwCzR0hTQS00NHFyLXJyamctMmNxcc4AB-eN

npm @apostrophecms/login-hcaptcha, @apostrophecms/login-recaptcha, @apostrophecms/form

Filter by Severity

Filter by Package

openclaw 301 n8n 74 nocodb 41 hono 41 parse-server 40 ghost 39 electron 35 directus 34 next 33 axios 28 undici 25 flowise 24 apostrophe 20 dompurify 19 nodemailer 19 vite 18 astro 16 sanitize-html 14 tinymce 14 pnpm 14 svelte 13 vm2 12 @openzeppelin/contracts 12 @openzeppelin/contracts-upgradeable 12 mermaid 12 renovate 11 tinymce/tinymce 11 ckeditor4 11 TinyMCE 11 nuxt 11 payload 11 joplin 10 protobufjs 9 angular 9 swagger-ui 9 bootstrap 9 editor.md 8 ip-address 8 @directus/api 8 @sveltejs/kit 8 validator 8 uptime-kuma 8 @backstage/plugin-scaffolder-backend 8 react-router 8 fastify 7 liquidjs 7 org.webjars.npm:jquery-ui 7 trix 7 @apostrophecms/import-export 7 nodebb 7 jquery-ui 7 vite-plus 7 tarteaucitronjs 7 org.webjars.npm:jquery 7 @budibase/server 7 jquery-ui-rails 7 @astrojs/node 7 jQuery.UI.Combined 7 marked 7 jquery 7 @lobehub/chat 6 signalk-server 6 jQuery 6 bootstrap 6 bootstrap 6 webpack-dev-server 6 @asymmetric-effort/specifyjs 6 twbs/bootstrap 6 @evershop/evershop 6 jquery-rails 6 js-yaml 6 matrix-js-sdk 6 jodit 6 org.webjars:bootstrap 6 vega 6 urijs 6 snyk-broker 6 url-parse 6 h3 6 fast-jwt 6 katex 5 @sync-in/server 5 matrix-appservice-irc 5 vditor 5 nuxt-og-image 5 bootstrap-sass 5 bootstrap-sass 5 msgpack5 5 @hono/node-server 5 handlebars 5 qs 5 music-metadata 5 postcss 5 next-auth 5 @aborruso/ckan-mcp-server 5 froala-editor 5 tar 5 lodash 5 markdown-it 4 shescape 4 trigger.dev 4 studiocms 4 apollo-server-core 4 yui 4 lodash-es 4 follow-redirects 4 @haxtheweb/haxcms-nodejs 4 serve 4 @angular/core 4 stream-json 4 jspdf 4 @auth0/nextjs-auth0 4 sillytavern 4 systeminformation 4 bootstrap.sass 4 devalue 4 vega-functions 4 ep_etherpad-lite 4 xmldom 4 @saltcorn/server 4 unleash-server 4 @steipete/summarize 4 clawdbot 4 rsshub 4 @actual-app/sync-server 4 materialize-css 4 network-ai 4 @anthropic-ai/claude-code 4 adm-zip 4 re2 4 fast-uri 4 @builder.io/qwik-city 4 glance 4 n8n-mcp 4 matrix-react-sdk 4 @angular/ssr 4 9router 3 @fastify/static 3 @adonisjs/http-server 3 @vitest/mocker 3 node-forge 3 petite-vue-i18n 3 brace-expansion 3 strapi 3 @excalidraw/excalidraw 3 http-proxy-middleware 3 @backstage/plugin-techdocs-backend 3 statics-server 3 action_text-trix 3 public 3 @nyariv/sandboxjs 3 @nuxt/webpack-builder 3 xlsx 3 mattermost-desktop 3 m-server 3 lodash-rails 3 @angular/compiler 3 express 3 fuxa-server 3 dojo 3 @strapi/strapi 3 langsmith 3 @xmldom/xmldom 3 @cyclonedx/cdxgen 3 showdown 3 valine 3 @jmondi/url-to-png 3 jose-node-esm-runtime 3 sequelize 3 org.webjars.npm:xlsx 3 @materializecss/materialize 3 @ckeditor/ckeditor5-markdown-gfm 3 parse 3 yapi-vendor 3 @perfood/couch-auth 3 mppx 3 flowise-components 3 @pdfme/schemas 3 @payloadcms/next 3 smol-toml 3 serialize-javascript 3 magicmirror 3 lodash-amd 3 moodle/moodle 3 hapi 3 better-auth 3 mysql 3 fast-xml-parser 3 obsidian-tc 3 @backstage/plugin-techdocs-node 3 jose 3 jose-node-cjs-runtime 3 layui 3 @intlify/vue-i18n-core 3 mysql2 3 docsify 3 agents 3 django-tinymce 3 mariadb 3 launch-editor 3

Filter by Repository

https://github.com/directus/directus 24 https://github.com/tinymce/tinymce 14 https://github.com/strapi/strapi 13 https://github.com/OpenZeppelin/openzeppelin-contracts 12 https://github.com/vitejs/vite 11 https://github.com/electron/electron 11 https://github.com/TryGhost/Ghost 10 https://github.com/vercel/next.js 10 https://github.com/ckeditor/ckeditor4 10 https://github.com/laurent22/joplin 10 https://github.com/backstage/backstage 10 https://github.com/jquery/jquery 9 https://github.com/parse-community/parse-server 8 https://github.com/pandao/editor.md 8 https://github.com/FlowiseAI/Flowise 8 https://github.com/swagger-api/swagger-ui 8 https://github.com/vega/vega 7 https://github.com/n8n-io/n8n 7 https://github.com/nocodb/nocodb 7 https://github.com/louislam/uptime-kuma 7 https://github.com/panva/jose 6 https://github.com/nodejs/undici 6 https://github.com/withastro/astro 6 https://github.com/twbs/bootstrap 6 https://github.com/jquery/jquery-ui 6 https://github.com/NodeBB/NodeBB 6 https://github.com/matrix-org/matrix-js-sdk 6 https://github.com/ckeditor/ckeditor5 5 https://github.com/apostrophecms/sanitize-html 5 https://github.com/KaTeX/KaTeX 5 https://github.com/lobehub/lobe-chat 5 https://github.com/matrix-org/matrix-appservice-irc 5 https://github.com/nextauthjs/next-auth 5 https://github.com/unshiftio/url-parse 5 https://github.com/honojs/hono 5 https://github.com/evershopcommerce/evershop 5 https://github.com/matrix-org/matrix-react-sdk 4 https://github.com/markedjs/marked 4 https://github.com/mermaid-js/mermaid 4 https://github.com/DIYgod/RSSHub 4 https://github.com/AmauriC/tarteaucitron.js 4 https://github.com/keystonejs/keystone 4 https://github.com/apollographql/apollo-server 4 https://github.com/basecamp/trix 4 https://github.com/Dogfalo/materialize 4 https://github.com/aws/aws-cdk 4 https://github.com/cure53/DOMPurify 3 https://github.com/haxtheweb/issues 3 https://github.com/postcss/postcss 3 https://github.com/nuxt/nuxt 3 https://github.com/validatorjs/validator.js 3 https://github.com/medialize/uri.js 3 https://github.com/vanessa219/vditor 3 https://github.com/follow-redirects/follow-redirects 3 https://github.com/docsifyjs/docsify 3 https://github.com/nodemailer/nodemailer 3 https://github.com/sequelize/sequelize 3 https://github.com/cloudflare/workers-sdk 3 https://github.com/intlify/vue-i18n 3 https://github.com/jarofghosts/glance 3 https://github.com/sebhildebrandt/systeminformation 3 https://github.com/jasonraimondi/url-to-png 3 https://github.com/hapijs/hapi 3 https://github.com/froala/wysiwyg-editor 3 https://github.com/YMFE/yapi 3 https://github.com/ionicabizau/parse-url 3 https://github.com/angular/angular.js 3 https://github.com/xCss/Valine 3 https://github.com/medialize/URI.js 3 https://github.com/saltcorn/saltcorn 3 https://github.com/Escape-Technologies/graphql-armor 3 https://github.com/renovatebot/renovate 3 https://github.com/lodash/lodash 3 https://github.com/eclipse-theia/theia 3 https://github.com/mde/ejs 2 https://github.com/caolan/forms 2 https://github.com/sidorares/node-mysql2 2 https://github.com/karma-runner/karma 2 https://github.com/josdejong/jsoneditor 2 https://github.com/expressjs/express 2 https://github.com/Vanessa219/vditor 2 https://github.com/MrRio/jsPDF 2 https://github.com/i18next/i18next 2 https://github.com/better-auth/better-auth 2 https://github.com/OpenC3/cosmos 2 https://github.com/ai/nanoid 2 https://github.com/matrix-org/matrix-appservice-bridge 2 https://github.com/highlightjs/highlight.js 2 https://github.com/Finastra/finastra-nodejs-libs 2 https://github.com/koajs/koa 2 https://github.com/vriteio/vrite 2 https://github.com/guardian/html-janitor 2 https://github.com/psi-4ward/psitransfer 2 https://github.com/jameswlane/status-board 2 https://github.com/erxes/erxes 2 https://github.com/pnpm/pnpm 2 https://github.com/socketio/socket.io 2 https://github.com/summernote/summernote 2 https://github.com/koush/scrypted 2 https://github.com/pugjs/pug 2 https://github.com/auth0/nextjs-auth0 2 https://github.com/apostrophecms/apostrophe 2 https://github.com/sass/node-sass 2 https://github.com/manuelstofer/json-pointer 2 https://github.com/rvagg/bl 2 https://github.com/ua-parser/uap-core 2 https://github.com/yahoo/serialize-javascript 2 https://github.com/gatsbyjs/gatsby 2 https://github.com/webpack/webpack-dev-server 2 https://github.com/mozilla/nunjucks 2 https://github.com/sveltejs/svelte 2 https://github.com/cloudflare/workers-oauth-provider 2 https://github.com/axios/axios 2 https://github.com/Urigo/graphql-mesh 2 https://github.com/zcaceres/markdownify-mcp 2 https://github.com/VulnSageAgent/PoCs 2 https://github.com/braintree/sanitize-url 2 https://github.com/vendure-ecommerce/vendure 2 https://github.com/getsentry/sentry-javascript 2 https://github.com/xmldom/xmldom 2 https://github.com/AhmedAdelFahim/express-xss-sanitizer 2 https://github.com/auth0/node-jsonwebtoken 2 https://github.com/excalidraw/excalidraw 2 https://github.com/chimurai/http-proxy-middleware 2 https://github.com/socketio/engine.io 2 https://github.com/moxiecode/plupload 2 https://github.com/umbraco/Umbraco-CMS 2 https://github.com/freshfish-hust/my-cves 2 https://github.com/Stuk/jszip 2 https://github.com/firebase/firebase-js-sdk 2 https://github.com/request/request 2 https://github.com/dahlia/fedify 2 https://github.com/zeit/next.js 2 https://github.com/facebook/react 2 https://github.com/openpgpjs/openpgpjs 2 https://github.com/nasa/openmct 2 https://github.com/keycloak/keycloak-nodejs-connect 2 https://github.com/GoogleChrome/rendertron 2 https://github.com/payloadcms/payload 2 https://github.com/parse-community/Parse-SDK-JS 2 https://github.com/nearform/fast-jwt 2 https://github.com/chocobozzz/peertube 2 https://github.com/jellyfin/jellyfin-web 2 https://github.com/punkave/sanitize-html 2 https://github.com/auth0/lock 2 https://github.com/isaacs/node-tar 2 https://github.com/mysqljs/mysql 2 https://github.com/nestjs/nest 2 https://github.com/givanz/VvvebJs 2 https://github.com/kjur/jsrsasign 2 https://github.com/digitalbazaar/forge 2 https://github.com/quilljs/quill 2 https://github.com/google/closure-library 2 https://github.com/fastify/fastify 2 https://github.com/salesforce/tough-cookie 2 https://github.com/adobe/css-tools 2 https://github.com/node-red/node-red-dashboard 1 https://github.com/readthedocs/readthedocs.org 1 https://github.com/decaporg/decap-cms 1 https://github.com/PrismJS/prism 1 https://github.com/ericnorris/striptags 1 https://github.com/Lumieducation/H5P-Nodejs-library 1 https://github.com/nhn/tui.grid 1 https://github.com/mongodb/js-bson 1 https://github.com/meteor/meteor 1 https://github.com/layui/layui 1 https://github.com/diegohaz/querymen 1 https://github.com/epeli/underscore.string 1 https://github.com/fastify/fastify-reply-from 1 https://github.com/node-fetch/node-fetch 1 https://github.com/surveyjs/survey-creator 1 https://github.com/unjs/ipx 1 https://github.com/antfu/utils 1 https://github.com/monsterkodi/sds 1 https://github.com/sparksuite/simplemde-markdown-editor 1 https://github.com/jquery-validation/jquery-validation 1 https://github.com/diegohaz/bodymen 1 https://github.com/ethanent/phin 1 https://github.com/alchemyplatform/aa-sdk 1 https://github.com/snyk/broker 1 https://github.com/duzun/URL.js 1 https://github.com/highlight/highlight 1 https://github.com/vercel/ms 1 https://github.com/brianloveswords/base64url 1 https://github.com/jaredly/hexo-admin 1 https://github.com/morrisjs/morris.js 1 https://github.com/danang-id/simple-crypto-js 1 https://github.com/matthewmueller/dom-iterator 1 https://github.com/jonschlinkert/remarkable 1 https://github.com/ibmdb/node-ibm_db 1 https://github.com/quasarframework/quasar-ui-qmarkdown 1 https://github.com/junosuarez/url-relative 1 https://github.com/visjs/vis-timeline 1 https://github.com/claviska/jquery-minicolors 1 https://github.com/PebbleRoad/glossarizer 1 https://github.com/vitaly-t/pg-promise 1 https://github.com/mbloch/mapshaper 1 https://github.com/microlinkhq/metascraper 1 https://github.com/Formstone/Formstone 1