winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/19/2026, 12:29:05 AM.

Microsoft ODBC Driver 11 for SQL Server
Microsoft Corporation · v12.0.5543.11
23
open
Synology Surveillance Station Client
Synology · v2.2.3.2598
23
open
Microsoft Teams TxNDI add-on
Microsoft · v2024.8.1.14
23
open
Microsoft Teams
Microsoft Corporation · v26149.701.4759.8860
23
open
Microsoft ODBC Driver 17 for SQL Server
Microsoft Corporation · v17.11.1.1
23
open
SynologyCameraTool
Synology · v1.0.0-29
23
open
Microsoft ODBC Driver 13 for SQL Server
Microsoft Corporation · v13.1.4414.46
23
open
Sqlcmd Tools
Microsoft Corporation · v1.10.0
23
open
Intel® oneAPI Base Toolkit
Intel Corporation · v2025.1.3.8
23
open
Nginx UI
0xJacky · v2.6.1
23
open
Synology Evidence Integrity Authenticator
Synology Inc. · v1.2.3-025
23
open
GoCD Agent
ThoughtWorks, Inc. · v21.2.0-12498
23
open
7-Zip
Igor Pavlov · v26.03
22
open
Microsoft Access database engine 2016
Microsoft Corporation · v16.0.5044.1000
22
open
7-Zip ZS
Igor Pavlov, Tino Reichardt, Sergey Brester · v26.02-v1.5.7-R2
22
open
jq
jqlang · v1.8.2
22
open
MySQL Workbench 8.0 CE
Oracle Corporation · v26.7.0
22
open
mutool
Artifex Software · v1.23.0
22
open
Acronis Cyber Protect Home Office
Acronis · v28.3.1.41126
22
open
Cursor
Anysphere · v3.19.7
21
open
Microsoft .NET Runtime 8.0
Microsoft Corporation · v8.0.31
21
open
Git
The Git Development Community · v2.55.0.3
21
open
Microsoft .NET Windows Desktop Runtime 3.1
Microsoft Corporation · v3.1.32
21
open
ONLYOFFICE Desktop Editors
Ascensio System SIA · v9.4.0
21
open