winget packages with open CVEs
2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/18/2026, 6:12:56 PM.
Sante DICOM Viewer Lite
Santesoft LTD · v5.0.9
28
open
Sante DICOM Viewer Pro
Santesoft LTD · v14.2.7
28
open
Kubernetes CLI
The Kubernetes Authors · v1.37.0
28
open
Salt Minion
SaltStack, Inc · v3008.2
28
open
OpenSC smartcard framework Light
OpenSC Project · v0.27.1
28
open
OpenSC smartcard framework
OpenSC Project · v0.26.1
28
open
Nextcloud
Nextcloud GmbH · v34.0.4
27
open
ESP-IDF Installation Manager CLI
Espressif Systems · v0.19.0
27
open
coreutils
uutils · v0.11.0
26
open
SketchUp Viewer
Trimble, Inc. · v22.0.316
26
open
OctaCore Utils
Yohanes Oktanio · v1.0.0
26
open
OpenShift Client
Red Hat Inc. · v4.19.10
25
open
Windows App
Microsoft Corp. · v2.0.1315.0
24
open
Remote Desktop
Microsoft Corporation · v1.2.7391.0
24
open
Helm
Helm · v4.3.0
24
open
NETGEAR Discovery Tool
NETGEAR · v2.0.7
24
open
Remote Desktop Multimedia Redirection Service
Microsoft Corporation · v1.0.2602.05003
24
open
Ollama (Portable)
Ollama · v0.33.1
23
open
Microsoft ODBC Driver 18 for SQL Server
Microsoft Corporation · v18.6.2.1
23
open
Microsoft Teams
Microsoft Corporation · v26198.304.4946.9672
23
open
Ollama
Ollama · v0.34.2
23
open
Microsoft SQL Server 2012 Native Client
Microsoft Corporation · v11.4.7001.0
23
open
Microsoft Teams classic
Microsoft Corporation · v1.8.00.27654
23
open
Microsoft ODBC Driver 11 for SQL Server
Microsoft Corporation · v12.2.5543.11
23
open