winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/19/2026, 12:14:47 PM.

Forkgram
Forkgram · v7.2.8
5
open
DeepChat
ThinkInAIXYZ · v1.1.1
5
open
Sante DICOM Editor
Santesoft LTD · v10.2.7
5
open
Multipass
Canonical Ltd · v1.16.4
5
open
Xbox Game Package Manager
Microsoft Corporation · v3.1.40
5
open
Barrier
Debauchee Open Source Group · v2.4.0
5
open
WSLtty
Mintty contributors · v3.8.0.3
5
open
eSpeak NG
eSpeak Community · v1.52.0
5
open
HiCOS Client
Chunghwa Telecom Corp., Ltd. · v3.1.0
5
open
Webroot SecureAnywhere
Webroot · v9.0.45.63
5
open
IBM Aspera Connect
IBM · v4.2.15.870
5
open
Janet
JanetLang · v1.41.2
5
open
Wondershare FilmoraPro
Wondershare · v2.6.11519.63305
5
open
Mini SFTP Server
Core FTP · v2.38
5
open
MicroDicom Shell Extension
MicroDicom · v5.0.0
5
open
IBM Aspera
IBM · v1.1.0
5
open
Xbox Live Developer Tools
Microsoft Corporation · v1.2610.0
5
open
HashiCorp Boundary
HashiCorp · v0.21.3
5
open
Remote Iteration Client
Microsoft Corporation · v0.0.13-preview
5
open
64Gram Desktop
64Gram · v1.2.8
5
open
D-Link DWA-X1850 Driver
D-Link · v1.05
5
open
Daily Prayer Timer
Abiruzzaman Molla · v2.9.1
5
open
Beats packetbeat
Elastic · v9.5.4
5
open
materialgram
kukuruzka165 · v7.0.5.1
5
open