winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/19/2026, 12:29:05 AM.

OpenOffice
Apache Software Foundation · v4.116.9816
20
open
Microsoft ASP.NET Core Hosting Bundle 7.0
Microsoft Corporation · v7.0.20
20
open
Microsoft ASP.NET Core Hosting Bundle 3.1
Microsoft Corporation · v3.1.32
20
open
Microsoft ASP.NET Core Hosting Bundle 6.0
Microsoft Corporation · v6.0.36
20
open
Microsoft ASP.NET Core Hosting Bundle 5.0
Microsoft Corporation · v5.0.17
20
open
Microsoft ASP.NET Core Runtime 7.0
Microsoft Corporation · v7.0.20
20
open
Microsoft ASP.NET Core Runtime 5.0
Microsoft Corporation · v5.0.17
20
open
Monica
Beijing Butterfly Effect Technology Co., Ltd. · v2.9.5
20
open
Astro CLI
Astronomer · v1.45.0
20
open
Microsoft ASP.NET Core Hosting Bundle 11.0 Preview
Microsoft Corporation · v11.0.0-rc.1.26425.128
20
open
Microsoft .NET Core SDK 2.2.207 (x64)
Microsoft Corporation · v2.2.207
20
open
Microsoft ASP.NET Core Runtime 11.0 Preview
Microsoft Corporation · v11.0.0-rc.1.26425.128
20
open
Microsoft .NET Core SDK 3.0.103 (x64)
Microsoft Corporation · v3.0.103.14459
20
open
Microsoft ASP.NET Core Runtime 3.1
Microsoft Corporation · v3.1.32
20
open
Azul Zulu JDK 25
Azul Systems, Inc. · v25.36.205
19
open
Azul Zulu JDK 17
Azul Systems, Inc. · v17.68.203
19
open
Azul Zulu JDK 26
Azul Systems, Inc. · v26.32.203
19
open
Affinity
Canva · v3.3.0.4850
19
open
Azul Zulu JDK 7
Azul Systems, Inc. · v7.56.0.11
19
open
Azul Zulu JDK 8
Azul Systems, Inc. · v8.96.0.205
19
open
Azul Zulu JRE 8
Azul Systems, Inc. · v8.96.0.205
19
open
Jellyfin2Samsung
Jellyfin2Samsung · v2.3.1.1
19
open
FontForge
FontForgeBuilds · v20251009
19
open
Azul Zulu JDK 11
Azul Systems, Inc. · v11.90.205
19
open