winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/18/2026, 6:12:56 PM.

winpython
winpython · v7.0.20230928
43
open
Python 3.5
Python Software Foundation · v3.5.4
43
open
Python 3.7
Python Software Foundation · v3.7.9
43
open
winpython-dot-pypy
winpython · v3.8.12.3
43
open
winpython-dot
winpython · v6.4.20230625final
43
open
winpython-pypy
winpython · v7.0.20230928
43
open
Python 3.4
Python Software Foundation · v3.4.4
43
open
Python 3.1
Python Software Foundation · v3.1.4
43
open
Python 3.2
Python Software Foundation · v3.2.5
43
open
Python Launcher
Vinay Sajip · v1.0.1.6
43
open
Python 3.3
Python Software Foundation · v3.3.5
43
open
Python 3.6
Python Software Foundation · v3.6.8
43
open
Wasmtime
Crane Station · v48.0.2
41
open
Tenable Nessus
Tenable, Inc. · v10.12.4.20038
41
open
Wasmtime
Bytecode Alliance · v48.0.2
41
open
Zimbra Desktop
Synacor, Inc. · v4.46.0
40
open
Autodesk Design Review
Autodesk, Inc. · v15.3.0.5
39
open
Exiv2
Exiv2 · v0.28.8
38
open
NATS Server
NATS Authors · v2.15.0
35
open
Confluence Long Term Support
Atlassian · v10.2.15
35
open
HashiCorp Nomad
HashiCorp · v2.0.7
34
open
M-Files Online
M-Files Corporation · v23.4.12528.8
34
open
Hubble
Cilium · v0.12.0
34
open
JetBrains Hub
JetBrains · v23.1.16990
33
open