winget packages with open CVEs
2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/18/2026, 6:18:49 AM.
ImageMagick Q16-HDRI
ImageMagick Studio LLC · v7.1.2.31
249
open
ImageMagick Q8
ImageMagick Studio LLC · v7.1.2.31
249
open
ImageMagick Q16
ImageMagick Studio LLC · v7.1.2.30
249
open
ImageMagick Q8
ImageMagick Studio LLC · v7.1.2.24
249
open
Vim
Bram Moolenaar et al. · v9.2.1116
228
open
Vim
Bram Moolenaar et al. · v9.2.1054
228
open
Microsoft System CLR Types for SQL Server 2019
Microsoft Corporation · v15.0.2000.5
182
open
Microsoft SQL Server 2019 Express
Microsoft · v15.2204.5490.2
182
open
Microsoft SQL Server 2019 Developer
Microsoft · v15.2204.5490.2
182
open
Wireshark
The Wireshark developer community, https://www.wireshark.org · v4.6.8
172
open
PDF-Tools
PDF-XChange Co Ltd. · v11.0.1.0
172
open
Liberica NIK 22 (JDK 11)
BellSoft · v22.3.5
167
open
Liberica NIK 23 Full (JDK 21)
BellSoft · v23.1.4
167
open
Liberica NIK 24 (JDK 22)
BellSoft · v24.0.2
167
open
Liberica NIK 24 Full (JDK 22)
BellSoft · v24.0.2
167
open
JT2Go
Siemens PLM Software · v2606.0.26191
166
open
Java(TM) SE Development Kit 26
Oracle Corporation · v26.0.2.0
158
open
Java(TM) SE Development Kit 25
Oracle Corporation · v25.0.4.1
158
open
Amazon Corretto 8
Amazon · v1.8.0.504
158
open
Java(TM) SE Development Kit 17
Oracle Corporation · v17.0.12.0
158
open
Java(TM) SE Development Kit 21
Oracle Corporation · v21.0.12.0
158
open
Java(TM) SE Development Kit 18
Oracle Corporation · v18.0.2.1
158
open
Amazon Corretto 25
Amazon · v25.0.4.8
158
open
Java(TM) SE Development Kit 22
Oracle Corporation · v22.0.2.0
158
open