winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/19/2026, 6:16:52 AM.

DiskPulse Server
Flexense Computing Systems Ltd. · v17.3.18
11
open
Hoppscotch
hoppscotch · v26.8.1-0
11
open
SUPERAntiSpyware
SUPERAntiSpyware.com · v10.0.1278
11
open
VLC media player
VideoLAN · v3.0.23
10
open
Nessus Agent
Tenable, Inc. · v11.2.2.20009
10
open
WinRAR
win.rar GmbH · v7.23.0
10
open
VLC media player (Nightly)
VideoLAN · v4.0.0.0-nightly20260509
10
open
Microsoft Power BI Report Server
Microsoft Corporation · v1.26.9682.1442
10
open
Power BI Report Builder
Microsoft Corporation · v15.7.1819.28
10
open
Mailpit
Ralph Slooten · v1.31.1
10
open
Ubiquiti UniFi Network Server
Ubiquiti Inc. · v10.6.106
9
open
WPS Office
Kingsoft Corp. · v12.1.0.28505
9
open
Zoom VDI Universal Plugin
Zoom Video Communications, Inc. · v6.6.27060
9
open
WPS Office
Kingsoft Corp. · v12.2.0.23196
9
open
SketchUp 2026
Trimble, Inc. · v26.2.243
9
open
SketchUp 2025
Trimble, Inc. · v25.0.660
9
open
JetBrains Toolbox
JetBrains · v3.8.1.0
9
open
Microsoft Safety Scanner
Microsoft Corporation · v1.459.280.0
9
open
SketchUp Pro 2022
Trimble, Inc. · v22.0.354
9
open
Plex Media Server
Plex, Inc. · v1.43.4.10903
9
open
SketchUp 2023
Trimble, Inc. · v23.1.340
9
open
Plex
Plex, Inc. · v1.115.0
9
open
WebStorm (EAP)
JetBrains s.r.o. · v263.3889.67
9
open
Nethack
Nethack DevTeam · v5.0.0
9
open