winget packages with open CVEs
2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/18/2026, 6:12:56 PM.
Mattermost
Mattermost, Inc. · v6.3.0
72
open
Hashicorp Vault
HashiCorp, Inc. · v2.1.0
71
open
Visual Studio Enterprise 2017
Microsoft Corporation · v15.9.70
71
open
Ghost Trap
PaperCut Software Int. Pty. Ltd. · v1.6.10.07
71
open
Zoom Workplace
Zoom · v7.1.46825
70
open
Zoom Workplace (EXE)
Zoom Video Communications, Inc. · v7.1.8 (46825)
70
open
NVIDIA DisplayID Firmware Updater
NVIDIA Corporation · v1.1.0
69
open
NVIDIA DisplayPort Firmware Updater
NVIDIA Corporation · v1.1
69
open
Jira Software Long Term Support
Atlassian · v11.3.10
69
open
Microsoft SQL Server 2025 Developer
Microsoft Corporation · v17.0.1000.7
62
open
Microsoft SQL Server 2025 Express
Microsoft Corporation · v17.0.1000.7
62
open
QNAP Qsync Client
QNAP Systems, Inc. · v6.1.0.0831
62
open
IntelliJ IDEA Community Edition
JetBrains s.r.o. · v2025.2.6.2
61
open
IntelliJ IDEA
JetBrains s.r.o. · v2026.2.2
61
open
IntelliJ IDEA Community Edition (EAP)
JetBrains s.r.o. · v252.26199.7
61
open
IntelliJ IDEA Ultimate Edition (EAP)
JetBrains s.r.o. · v252.26199.7
61
open
IntelliJ IDEA Educational Edition
JetBrains s.r.o. · v2022.2.2
61
open
IntelliJ IDEA Ultimate Edition
JetBrains s.r.o. · v2025.2.5
61
open
UniversalForwarder
Splunk, Inc. · v10.4.3
59
open
Liberica NIK Core 23 (JDK 21)
BellSoft · v23.1.4
58
open
Liberica NIK 22 Full (JDK 11)
BellSoft · v22.3.5
58
open
Liberica NIK 23 (JDK 17)
BellSoft · v23.0.5
58
open
Liberica NIK 23 Full (JDK 17)
BellSoft · v23.0.5
58
open
GIMP
The GIMP Team · v3.2.4
56
open