winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/19/2026, 6:16:52 AM.

WebStorm
JetBrains s.r.o. · v2026.2.2
9
open
Nim programming language
nim · v2.0.8
9
open
cosign
sigstore · v3.1.3
9
open
lychee
lycheeverse · v0.24.2
9
open
PyCharm Community Edition
JetBrains s.r.o. · v2025.2.6.1
8
open
LLVM
LLVM · v23.1.1
8
open
Razer Synapse 3
Razer Inc. · v1.22.0.737
8
open
PyCharm
JetBrains s.r.o. · v2026.2.2
8
open
Intel(R) Extreme Tuning Utility
Intel Corporation · v7.14.2.69
8
open
SonicWall NetExtender
SonicWall Inc. · v10.3.5
8
open
Microsoft OneDrive
Microsoft Corporation · v26.150.0804.0011
8
open
Yandex Browser
Yandex · v26.8.3.1002
8
open
3CX
3CX Software DMCC · v20.0.1190.0
8
open
PuTTY
Simon Tatham · v0.85.0.0
8
open
LLVM MinGW (UCRT runtime)
Martin Storsjö · v22.1.8-20260616
8
open
NetTime
Mark Griffiths · v3.14
8
open
LLVM MinGW (MSVCRT runtime)
Martin Storsjö · v22.1.8-20260616
8
open
ClangFormat
LLVM · v22.1.6
8
open
Razer Synapse 4
Razer Inc. · v2.6.0.890
8
open
Cisco Webex Network Recording Converter
Cisco Webex LLC · v45.6.4.8
8
open
Geode CLI
GeodeSDK · v3.9.0
8
open
Synology Active Backup for Business Agent
Synology Inc. · v3.2.5059
8
open
OSSEC HIDS
OSSEC · v3.7.0
8
open
Webex Recorder and Player
Cisco Webex LLC · v45.6.4.8
8
open