winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/18/2026, 12:16:03 PM.

Liberica JDK 12
BellSoft · v12.0.2+10
86
open
Liberica JDK 14 Lite
BellSoft · v14.0.2+13
86
open
Liberica JDK 25 Lite
BellSoft · v25.0.4.9
86
open
Liberica JDK 19 Full
BellSoft · v19.0.2.9
86
open
Liberica JDK 11
BellSoft · v11.0.32.101
86
open
Liberica JDK 8 Lite
BellSoft · v8.0.504.1
86
open
Liberica JDK 17
BellSoft · v17.0.20.101
86
open
Liberica JDK 18 Full
BellSoft · v18.0.2.101
86
open
Liberica JDK 8
BellSoft · v8.0.504.1
86
open
Eclipse Temurin JDK with Hotspot 24
Eclipse Adoptium · v24.0.2.12
86
open
Liberica JDK 20 Lite
BellSoft · v20.0.2.10
86
open
Liberica JDK 15 Full
BellSoft · v15.0.2.10
86
open
Liberica JDK 26
BellSoft · v26.0.2.101
86
open
Liberica JDK 16 Full
BellSoft · v16.0.2.7
86
open
Liberica JDK 17 Full
BellSoft · v17.0.20.101
86
open
Liberica JDK 24
BellSoft · v24.0.2.12
86
open
Liberica JDK 18
BellSoft · v18.0.2.101
86
open
ojdkbuild OpenJDK
ojdkbuild open-source project · v1.8.3321.9
86
open
Liberica JDK 11 Lite
BellSoft · v11.0.32.11
86
open
Liberica JDK 14
BellSoft · v14.0.2.13
86
open
OpenJDK 13
ojdkbuild open-source project · v13.0.3.1
86
open
Liberica JDK 20
BellSoft · v20.0.2.10
86
open
Liberica JDK 19
BellSoft · v19.0.2.9
86
open
Liberica JDK 24 Lite
BellSoft · v24.0.2+12
86
open