winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/18/2026, 6:12:56 PM.

Electron
OpenJS Foundation · v36.9.5
33
open
Electron
OpenJS Foundation · v41.10.7
33
open
Electron
OpenJS Foundation · v33.4.11
33
open
Electron
OpenJS Foundation · v37.10.3
33
open
Electron
OpenJS Foundation · v40.10.6
33
open
Electron
OpenJS Foundation · v35.7.5
33
open
Electron
OpenJS Foundation · v38.8.6
33
open
Electron
OpenJS Foundation · v39.8.10
33
open
Electron
OpenJS Foundation · v34.5.8
33
open
NASM
NASM · v3.02
32
open
HashiCorp Consul
HashiCorp · v2.0.4
31
open
Microsoft OLE DB Driver for SQL Server
Microsoft Corporation · v19.4.1.0
30
open
Claude Code
Anthropic PBC · v2.1.268
29
open
opencode
SST · v1.18.30
29
open
busybox-w32
frippery.org · v1.38.0-FRP-5579-g5749feb35
29
open
Vi
Saki Studio · v1.0.0
29
open
Qt Designer
Michael Herrmann · v5.11.1
29
open
Another Qt installer
Hiroshi Miura · v3.3.0
29
open
QtCreator
The Qt Company Ltd · v20.0.1
29
open
PowerShell
Microsoft Corporation · v7.6.6.0
28
open
PowerShell Preview
Microsoft Corporation · v7.7.4.0
28
open
LibreOffice SDK
The Document Foundation · v26.8.0.3
28
open
LibreOffice Help Pack
The Document Foundation · v26.8.0.3
28
open
SQLite
SQLite · v3.53.4
28
open