winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/19/2026, 12:14:47 PM.

ticker
achannarasappa · v5.3.0
4
open
Lenovo Update Retriever
Lenovo · v5.08.03.92
4
open
Actual Budget
Actual Budget · v26.9.0
4
open
Greenshot Preview
Greenshot · v1.3.277
4
open
Chatbox CE
Benn Huang · v0.10.4
4
open
RealPlayer
RealNetworks · v25.0.2
4
open
VX Search Enterprise
Flexense Computing Systems Ltd. · v17.4.16
4
open
DooTask
KuaiFan · v1.9.36
4
open
AXIS Device Manager
Axis Communications AB · v5.34.172
4
open
Power Platform ToolBox
Power Platform ToolBox · v1.2.5
4
open
Copilot modernization agent
GitHub, Inc. · v1.0.74
4
open
Helix Visual Merge Tool (P4Merge)
Perforce Software, Inc. · v214.226.4565
4
open
MongoDB Compass Isolated Edition
MongoDB Inc · v1.50.0.0
4
open
MongoDB Compass Community
MongoDB · v1.41.0
4
open
Bazarr
Morpheus · v1.17
4
open
RubyMine (EAP)
JetBrains s.r.o. · v263.4732.30
4
open
FlyClash
GtxFury · v0.2.9
4
open
RubyMine
JetBrains s.r.o. · v2026.2.2
4
open
Avaya Cloud Office for Teams Desktop Plugin
RingCentral · v26.2.20.237
4
open
Crestron AirMedia Peripherals
Crestron Electronics, Inc. · v1.11.1.164
4
open
KNIME Analytics Platform
KNIME AG · v5.8.3
4
open
MongoDB Compass Readonly
MongoDB Inc · v1.50.0.0
4
open
VX Search Pro
Flexense Computing Systems Ltd. · v17.4.16
4
open
Make Bing Your Search Engine
Microsoft · v1.7.57.1
4
open