Moderate 10,426 High 8,212 Critical 3,374 Low 1,515

maven 6,698 packagist 5,251 pypi 4,819 npm 4,292 go 2,833 nuget 1,620 cargo 1,087 rubygems 893 hex 38 actions 37 swift 34 pub 10

directus 39 parse-server 33 next 29 electron 28 flowise 24 @openzeppelin/contracts 21 @openzeppelin/contracts-upgradeable 20 tinymce 16 ghost 16 sequelize 16 vite 15 undici 15 nodebb 14 swagger-ui 14 ckeditor4 14 angular 14 joplin 14 strapi 13 vm2 12 marked 12 matrix-js-sdk 12 TinyMCE 11 tinymce/tinymce 11 nocodb 11 bootstrap 10 n8n 10 handlebars 10 uptime-kuma 9 @strapi/strapi 9 serve 9 matrix-appservice-irc 9 @evershop/evershop 9 matrix-react-sdk 9 next-auth 9 systeminformation 9 steal 8 sanitize-html 8 elliptic 8 @directus/api 8 @anthropic-ai/claude-code 8 express-cart 8 node-forge 8 shescape 8 @haxtheweb/haxcms-nodejs 8 urijs 8 url-parse 8 editor.md 8 validator 8 jsrsasign 8 dompurify 8 npm 8 org.webjars.npm:jquery-ui 7 jQuery.UI.Combined 7 hapi 7 axios 7 @lobehub/chat 7 tar 7 mongoose 7 snyk-broker 7 lodash 7 mermaid 7 total.js 7 hermes-engine 7 jquery-ui 7 vega 7 parse-url 6 prismjs 6 openpgp 6 @sveltejs/kit 6 hono 6 tarteaucitronjs 6 mattermost-desktop 6 jquery 6 safe-eval 6 rsshub 6 aaptjs 6 @strapi/plugin-users-permissions 6 bootstrap 5 rendertron 5 jspdf 5 better-auth 5 keystone 5 katex 5 @saltcorn/server 5 @keystone-6/core 5 total4 5 ua-parser-js 5 fastify 5 astro 5 dojo 5 aws-cdk-lib 5 ejs 5 express 5 mysql2 5 vditor 5 xlsx 5 passport-wsfed-saml2 5 yarn 5 sweetalert2 5 trix 5 public 5 ws 5 @backstage/plugin-scaffolder-backend 5 nuxt 5 valine 4 yui 4 erxes 4 @auth0/nextjs-auth0 4 payload 4 auth0-lock 4 auth0-js 4 tar-fs 4 remarkable 4 simple-git 4 generator-jhipster 4 simple-markdown 4 jQuery 4 qs 4 meshcentral 4 froala-editor 4 @finos/git-proxy 4 software.amazon.awssdk.iotdevicesdk:aws-iot-device-sdk 4 muhammara 4 multer 4 realms-shim 4 org.webjars.npm:jquery 4 @apollo/gateway 4 glance 4 ses 4 fast-xml-parser 4 petite-vue-i18n 4 convert-svg-core 4 follow-redirects 4 ecstatic 4 safer-eval 4 moment 4 jquery-validation 4 jsonwebtoken 4 aws-iot-device-sdk-v2 4 @intlify/vue-i18n-core 4 apollo-server-core 4 mongo-express 4 snyk 4 vue-i18n 4 mongosh 4 xml-crypto 4 pnpm 4 awsiotsdk 4 apostrophe 4 code-server 4 vega-functions 4 materialize-css 4 engine.io 4 @node-saml/node-saml 4 typeorm 3 parsel 3 agnai 3 grunt 3 simplehttpserver 3 slpjs 3 slp-validate 3 bin-links 3 mixme 3 snowflake-sdk 3 angular-expressions 3 socket.io 3 socket.io-file 3 socket.io-parser 3 @soketi/soketi 3 json-pointer 3 json-ptr 3 @hapi/subtext 3 statics-server 3 stimulsoft-dashboards-js 3 @strapi/admin 3 @strapi/plugin-content-manager 3 m-server 3 postcss 3 @strapi/utils 3 braces 3 @frangoteam/fuxa 3 subtext 3 mxgraph 3 js-yaml 3 mysql 3 @cubejs-backend/api-gateway 3 nadesiko3 3 protobufjs 3 keycloak-connect 3 highcharts 3 @ckeditor/ckeditor5-markdown-gfm 3 ftp-srv 3 @commercial/subtext 3 raneto 3 koa 3 @builder.io/qwik 3 fuxa-server 3 tough-cookie 3 http-live-simulator 3 http-proxy-middleware 3

https://github.com/commenthol/safer-eval 2