winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/19/2026, 12:14:47 PM.

Synology Drive Client
Synology · v8.1.0.18123
6
open
MySQL Shell
Oracle and/or its affiliates · v8.4.5
6
open
croc
schollz · v11.5.3
6
open
Dell Display Manager
Dell Inc. · v2.3.1.16
6
open
PhpStorm
JetBrains s.r.o. · v2026.2.2
6
open
Anki
Anki · v26.09.2
6
open
Stirling-PDF
Stirling-Software · v2.14.3
6
open
1Password CLI
AgileBits · v2.39.0
6
open
HDP PC Agent
QNAP Systems, Inc. · v1.5.1
6
open
JupyterLab
Project Jupyter · v4.6.2-1
6
open
PDF Architect 9
pdfforge GmbH · v9.1.102.23129
6
open
PrusaSlicer
Prusa Research · v2.9.6
6
open
GDAL
GISInternals · v3.12.1
6
open
Rust (GNU LLVM)
The Rust Project Developers · v1.98.1
6
open
Dell Peripheral Manager
Dell Inc. · v1.7.7
6
open
BeeDrive
Synology · v2.0.4-20404
6
open
PhpStorm (EAP)
JetBrains s.r.o. · v263.3889.75
6
open
Simba Athena ODBC Driver
Simba Technologies · v1.2.3.1000
6
open
Seq
Datalust Pty Ltd · v11.0.17114.0
6
open
OneNote Client Diagnostics Tool
Microsoft · v1.0.0.0
6
open
OneNote Tagging Kit
WetHat Lab · v5.1.8514
6
open
Microsoft Defender for Cloud CLI
Microsoft · v2.0.03334.114
6
open
Notation CLI
Notary Project · v1.3.2
6
open
Autopsy
The Sleuth Kit · v4.23.1
6
open