winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/18/2026, 12:16:03 PM.

MongoDB Shell
MongoDB Inc. · v2.11.1
102
open
MongoDB CLI
MongoDB, Inc. · v2.0.7
102
open
iCloud (Legacy)
Apple Inc. · v7.21.0.23
97
open
Apache Lounge httpd
Apache Lounge · v2.4.68
95
open
Eclipse Temurin JDK with Hotspot 8
Eclipse Adoptium · v8.0.504.1
86
open
Eclipse Temurin JDK with Hotspot 21
Eclipse Adoptium · v21.0.12.101
86
open
Eclipse Temurin JDK with Hotspot 17
Eclipse Adoptium · v17.0.20.101
86
open
Microsoft Build of OpenJDK with Hotspot 21
Microsoft · v21.0.12.101
86
open
Eclipse Temurin JDK with Hotspot 25
Eclipse Adoptium · v25.0.4.101
86
open
Microsoft Build of OpenJDK with Hotspot 17
Microsoft · v17.0.20.101
86
open
Microsoft Build of OpenJDK with Hotspot 25
Microsoft · v25.0.4.101
86
open
Eclipse Temurin JDK with Hotspot 16
Eclipse Adoptium · v16.0.2.7
86
open
Eclipse Temurin JDK with Hotspot 11
Eclipse Adoptium · v11.0.32.101
86
open
AdoptOpenJDK JDK with Hotspot 8
AdoptOpenJDK · v8.0.292.10
86
open
Microsoft Build of OpenJDK with Hotspot 11
Microsoft · v11.0.32.101
86
open
AdoptOpenJDK JDK with Hotspot 15
AdoptOpenJDK · v15.0.2.7
86
open
Liberica JDK 25 Full
BellSoft · v25.0.4.101
86
open
AdoptOpenJDK JDK with Hotspot 17
AdoptOpenJDK · v17.0.0.20
86
open
Liberica JDK 17 Lite
BellSoft · v17.0.20.10
86
open
SapMachine 26 JDK
SapMachine Team · v26.0.2.256
86
open
Eclipse Temurin JDK with Hotspot 23
Eclipse Adoptium · v23.0.2.7
86
open
AdoptOpenJDK JDK with Eclipse OpenJ9 16
AdoptOpenJDK · v16.0.1.9
86
open
Liberica JDK 13 Full
BellSoft · v13.0.2+9
86
open
Eclipse Temurin JDK with Hotspot 19
Eclipse Adoptium · v19.0.2.7
86
open