winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/18/2026, 12:16:03 PM.

Liberica JDK 23 Full
BellSoft · v23.0.2.9
86
open
Liberica JDK 13 Lite
BellSoft · v13.0.2+9
86
open
Liberica JDK 23 Lite
BellSoft · v23.0.2+9
86
open
ojdkbuild OpenJDK 17
ojdkbuild open-source project · v17.0030.6.1
86
open
Liberica JDK 14 Full
BellSoft · v14.0.2.13
86
open
Liberica JDK 22 Full
BellSoft · v22.0.2.11
86
open
Liberica JDK 19 Lite
BellSoft · v19.0.2+9
86
open
OpenJDK 11
ojdkbuild open-source project · v11.0.15.1
86
open
OpenJDK 14
ojdkbuild open-source project · v14.0.1.1
86
open
SapMachine 26 JRE
SapMachine Team · v26.0.2.256
86
open
AdoptOpenJDK JDK with Hotspot 14
AdoptOpenJDK · v14.0.2.12
86
open
Liberica JDK 8 Full
BellSoft · v8.0.504.1
86
open
Eclipse Temurin JRE with Hotspot 18
Eclipse Adoptium · v18.0.2.101
86
open
Liberica JDK 26 Full
BellSoft · v26.0.2.101
86
open
Liberica JDK 22
BellSoft · v22.0.2.11
86
open
Liberica JDK 17
BellSoft · v17.0.20.101
86
open
Liberica JDK 15 Full
BellSoft · v15.0.2.10
86
open
Liberica JDK 18 Full
BellSoft · v18.0.2.101
86
open
Eclipse Temurin JDK with Hotspot 24
Eclipse Adoptium · v24.0.2.12
86
open
Liberica JDK 21
BellSoft · v21.0.12.101
86
open
Liberica JDK 16 Full
BellSoft · v16.0.2.7
86
open
Liberica JDK 11
BellSoft · v11.0.32.101
86
open
Liberica JDK 26
BellSoft · v26.0.2.101
86
open
Liberica JDK 12
BellSoft · v12.0.2+10
86
open