winget packages with open CVEs
2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/19/2026, 12:14:47 PM.
JetBrains dotUltimate
JetBrains s.r.o. · v2026.2.2
7
open
Prisma Access Browser
Palo Alto Networks Inc · v153.3.5.53
7
open
GOG GALAXY
GOG.com · v2.1.8.30
7
open
Intel oneAPI MKL
Intel Corporation · v2026.1.0
7
open
JetBrains Rider
JetBrains s.r.o. · v2026.2.0.2
7
open
Intel(R) PresentMon
Intel(R) Corporation · v2.5.1.0
7
open
Splashtop Streamer Deployment (MSI)
Splashtop Inc. · v3.8.4.1
7
open
Splashtop Streamer
Splashtop Inc. · v3.8.6.1
7
open
PresentMon Console
Intel Corporation · v2.5.1.0
7
open
Docker Buildx
Docker Inc. · v0.37.1
7
open
libjpeg-turbo SDK for Visual C++
libjpeg-turbo · v3.2.0
7
open
JetBrains Rider (EAP)
JetBrains s.r.o. · v262.8665.68
7
open
Microsoft Azure Service Fabric
Microsoft Corporation · v11.3.475.1
7
open
New API
Quantum Nous · v1.0.0-rc.38
7
open
Dash by Docker
Docker Inc · v0.20.0
7
open
Cato Client
Cato Networks · v6.8.3.8958
7
open
Splashtop Streamer Deployment
Splashtop Inc. · v3.8.4.1
7
open
libjpeg-turbo SDK for GCC
libjpeg-turbo · v3.2.0
7
open
Microsoft Azure Service Fabric SDK
Microsoft Corporation · v8.5.116
7
open
Wire
Wire · v3.44.5377
7
open
soft-serve
charmbracelet · v0.12.2
7
open
create-tauri-app
Tauri · v4.5.10
7
open
Dart SDK - stable channel
Gekorm · v1.6.0
7
open
pretixSCAN
rami.io GmbH · v1.23.0
7
open