winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/19/2026, 12:14:47 PM.

materialgram
kukuruzka165 · v7.0.5.1
5
open
eSpeak
eSpeak · v1.48.04
5
open
Workspace ONE Assist
Omnissa, LLC. · v26.08.00.5152
5
open
Policy CLI
opcr.io · v0.4.1
5
open
Core FTP Server
Core FTP · v2.0.775
5
open
Teleport
Gravitational, Inc. · v18.11.1
5
open
FreifunkMeet
Freifunk Muenchen · v2026.6.0
5
open
NetCDF
Unidata · v4.10.0
5
open
Touch Adaptation Kit Command Line Tool (TAK CLI)
Microsoft Corporation · v11.40.0
5
open
osslsigncode
Michał Trojnara · v2.14
5
open
360 File Guard
360 Security Center · v1.0.0.1202
5
open
ADConnector
Druva Technologies Pte. Ltd. · v1.0.0.0
5
open
Druva inSync
Druva Technologies Pte. Ltd. · v8.1.3
5
open
Vision Teacher for Chromebooks Machine-Wide Installer
Impero Solutions Ltd · v1.7.6.0
5
open
Open Policy Agent
Open Policy Agent · v1.20.2
5
open
Bing Wallpaper
Microsoft Corporation · v2.0.0.1
4
open
Lenovo System Update
Lenovo · v5.08.04.85
4
open
Clash Verge
Clash Verge Rev · v2.5.2
4
open
Power Automate for desktop
Microsoft Corporation · v2.72.00183.26250
4
open
LibreCAD
LibreCAD Team · v2.2.1.5
4
open
Copilot CLI
GitHub, Inc. · vv1.0.86
4
open
Nitro PDF Pro (NLS Version)
Nitro · v26.1.6.0
4
open
MongoDB Compass
MongoDB Inc · v1.50.0.0
4
open
Duo Authentication for Windows Logon
Duo Security Inc. · v5.3.0.2497
4
open