winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/19/2026, 12:29:05 AM.

Microsoft .NET Runtime 9.0
Microsoft Corporation · v9.0.20
21
open
Git
The Git Development Community · v2.52.0-rc2
21
open
Microsoft .NET SDK 3.1
Microsoft Corporation · v3.1.426
21
open
Entity Framework Core .NET Command-line Tools
Microsoft Corporation · v10.0.7
21
open
Microsoft .NET Runtime 11.0 Preview
Microsoft Corporation · v11.0.0-rc.1.26425.128
21
open
Git for Windows SDK
The Git Development Community · v1.0.8
21
open
MinIO Client
MinIO · v2025.08.13
21
open
Bitcoin Core
Bitcoin Core project · v31.1
21
open
Microsoft .NET Runtime 3.1
Microsoft Corporation · v3.1.32
21
open
PVRCarbon
Imagination Technologies Ltd. · v0.14.0
21
open
Microsoft .NET Core SDK 2.2.402 (x64)
Microsoft Corporation · v2.2.402
21
open
Microsoft .NET Runtime 2.2
Microsoft Corporation · v2.2.8.28209
21
open
PVRTexTool
Imagination Technologies Ltd. · v5.7.0
21
open
Microsoft .NET Core Runtime - 2.1.30 (x64)
Microsoft Corporation · v2.1.30.30411
21
open
Dell Command | Update for Windows Universal
Dell Inc. · v5.7.0
20
open
Microsoft ASP.NET Core Hosting Bundle 8.0
Microsoft Corporation · v8.0.31
20
open
Microsoft ASP.NET Core Runtime 9.0
Microsoft Corporation · v9.0.20
20
open
Dell Command | Update
Dell Inc. · v5.7.0
20
open
Microsoft ASP.NET Core Hosting Bundle 9.0
Microsoft Corporation · v9.0.20
20
open
Microsoft ASP.NET Core Runtime 8.0
Microsoft Corporation · v8.0.31
20
open
Microsoft ASP.NET Core Runtime 10.0
Microsoft Corporation · v10.0.12
20
open
Geth
Ethereum · v1.17.5
20
open
Microsoft ASP.NET Core Hosting Bundle 10.0
Microsoft Corporation · v10.0.12
20
open
Microsoft ASP.NET Core Runtime 6.0
Microsoft Corporation · v6.0.36
20
open