winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/18/2026, 12:16:03 PM.

Liberica JDK 15
BellSoft · v15.0.2.10
86
open
Node.js (LTS)
Node.js Foundation · v24.19.0
85
open
Node.js
Node.js Foundation · v26.7.0
85
open
Node.js 22
Node.js Foundation · v22.23.2
85
open
Node.js 18
Node.js Foundation · v18.20.8
85
open
Node.js 20
Node.js Foundation · v20.20.2
85
open
Node.js 17
Node.js Foundation · v17.9.1
85
open
Node.js 15
Node.js Foundation · v15.14.0
85
open
Node.js 14
Node.js Foundation · v14.21.3
85
open
Node.js 10
Node.js Foundation · v10.24.1
85
open
Node.js 19
Node.js Foundation · v19.9.0
85
open
Node.js 7
Node.js Foundation · v7.1.0
85
open
Node.js 4
Node.js Foundation · v4.8.7
85
open
Node.js 21
Node.js Foundation · v21.7.3
85
open
Node.js 12
Node.js Foundation · v12.22.12
85
open
Node.js 8
Node.js Foundation · v8.11.3
85
open
Node.js 23
Node.js Foundation · v23.11.0
85
open
Node.js 6
Node.js Foundation · v6.17.0
85
open
Node.js 16
Node.js Foundation · v16.20.2
85
open
OpenSSL Light
Shining Light Productions · v4.0.2
84
open
OpenSSL
Shining Light Productions · v4.0.2
84
open
OpenSSL Light LTS
Shining Light Productions · v3.5.6
84
open
FireDaemon OpenSSL
FireDaemon · v4.0.2
84
open
GrafanaOSS
Grafana Labs · v13.2.2
83
open