winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/18/2026, 6:12:56 PM.

Microsoft .NET Framework 4.5.1 Developer Pack (KB2861696)
Microsoft Corporation · v4.5.2
47
open
Microsoft .NET Framework Version 1.1 Redistributable Package
Microsoft · v1.1
47
open
Redis on Windows
MSOpenTech · v3.0.504
46
open
Memurai Developer
Janea Systems · v4.1.2
46
open
Cisco Webex App VDI Plugin (with Citrix dependency)
Cisco Systems, Inc · v45.8.0.32928
45
open
NVIDIA CUDA Toolkit
NVIDIA Corporation · v13.4
45
open
Webex
Cisco Systems, Inc · v46.8.0.35631
45
open
Cisco Webex Meetings
Cisco Webex LLC · v45.6.4.8
45
open
Cisco Webex Productivity Tools
Cisco Webex LLC · v45.2.0.63
45
open
Nsight Compute
NVIDIA Corporation · v2025.4.1
45
open
Webex WRF to WMV
Cisco Webex LLC · v39.4.0.134
45
open
MSN Explorer
Microsoft Corporation · v11.00.14393.0
44
open
Unbound
NLnet Labs · v1.26.0
44
open
Elasticsearch
Elastic · v7.16.3
44
open
Python 3.12
Python Software Foundation · v3.12.10
43
open
Python 3.14
Python Software Foundation · v3.14.7
43
open
Python 3.11
Python Software Foundation · v3.11.9
43
open
Python 3.13
Python Software Foundation · v3.13.15
43
open
Python 3.8
Python Software Foundation · v3.8.10
43
open
Python 3.9
Python Software Foundation · v3.9.13
43
open
Python 3.10
Python Software Foundation · v3.10.11
43
open
Python 3.0
Python Software Foundation · v3.0.1
43
open
Python 2
Python Software Foundation · v2.7.18150
43
open
Stackless Python
The Stackless Team · v3.7.9150.0
43
open