winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/19/2026, 12:29:05 AM.

Cisco JVDI Agent
Cisco Systems, Inc. · v15.2.1.60904
18
open
Incus
LinuxContainers · v7.4.0
18
open
PRTG Desktop
Paessler AG · v26.2.0
18
open
Omnissa Horizon Client
Omnissa, LLC · v8.19.0
17
open
Microsoft 365 Apps for enterprise
Microsoft Corporation · v16.0.20228.20124
17
open
Windows Admin Center (v2)
Microsoft Corporation · v2.7.5.21
17
open
llama.cpp
ggml · vb9994
17
open
Typora
typora.io · v1.14.10
17
open
Adobe DNG Converter
Adobe Systems, Inc. · v18.6
17
open
Adobe Creative Cloud
Adobe Inc. · v6.10.0.252.41
16
open
Sante PACS Server Free
Santesoft LTD · v1.6.6
16
open
nginx
nginx · v1.31.6
16
open
Sante PACS Server PG
Santesoft LTD · v4.2.5
16
open
Sante DVD Burning Server
Santesoft LTD · v1.2.2
16
open
Sante Web Downloader
Santesoft LTD · v1.0.12
16
open
CyberPower PowerPanel Personal
CyberPower Systems, Inc. · v2.7.1.1
16
open
Ktor CLI
JetBrains · v0.5.0
16
open
GeoServer
Open Source Geospatial Foundation · v3.0.1
16
open
nginx
freenginx · v1.31.4
16
open
Sante PACS Server
Santesoft LTD · v4.2.5
16
open
Juju
Canonical, Ltd · v3.1.2
16
open
Rustup: the Rust toolchain installer
The Rust Programming Language · v1.29.1
15
open
Intel® oneAPI HPC Toolkit
Intel Corporation · v2025.1.3.7
15
open
Sandboxie-Plus
http://xanasoft.com/ · v1.18.4
15
open