winget packages with open CVEs
2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/19/2026, 6:16:52 AM.
全民K歌
腾讯科技（深圳）有限公司 · v2.21.170.63
12
open
FastStone Image Viewer
FastStone Corporation · v8.5
12
open
kyverno
kyverno · v1.17.1
12
open
Eclipse Mosquitto MQTT broker
Eclipse Foundation · v2.1.2
12
open
SoX_ng
Sound eXchange NG · v14.7.1.2
12
open
Nextcloud Talk
Nextcloud GmbH · v2.3.2
12
open
copyparty
ocv.me · v1.20.23
12
open
MIT Kerberos for Windows
Massachusetts Institute of Technology · v4.1.0
12
open
wgcf
ViRb3 · v2.2.32
12
open
BitDefender Agent
Bitdefender · v26.0.1.233
12
open
LsAgent
Lansweeper · v12.6.3.3
12
open
studio-cli
WindRiver · v25.9.0
12
open
ESET Security
ESET, spol. s r.o. · v18.1.13.0
12
open
SyncBreeze Enterprise
Flexense Computing Systems Ltd. · v17.3.16
12
open
SyncBreeze Ultimate
Flexense Computing Systems Ltd. · v17.3.16
12
open
SyncBreeze Server
Flexense Computing Systems Ltd. · v17.3.16
12
open
SyncBreeze Pro
Flexense Computing Systems Ltd. · v17.3.16
12
open
ESET Security
ESET · v19.1.12.0
12
open
Nextcloud Talk Beta
Nextcloud GmbH · v2.2.3
12
open
SyncBreeze
Flexense Computing Systems Ltd. · v17.3.16
12
open
yt-dlp
yt-dlp · v2026.08.19
11
open
Sunshine
LizardByte · v2026.914.233613
11
open
yt-dlp-nightly
yt-dlp · v2026.08.30.232658
11
open
Cinema 4D 2025
Maxon · v2025.3.3
11
open