winget packages with open CVEs
2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/19/2026, 6:11:47 PM.
VX Search Server
Flexense Computing Systems Ltd. · v17.4.16
4
open
HackDesk
Michael Wang · v0.0.7
4
open
Tar
GnuWin32 · v1.13-1
4
open
RingCentralRooms
Zoom Video Communications, Inc. and RingCentral Inc. · v24.3.10.462
4
open
sens
junapur · v2.3.0
4
open
VX Search Ultimate
Flexense Computing Systems Ltd. · v17.4.16
4
open
VX Search
Flexense Computing Systems Ltd. · v17.4.16
4
open
Cap’n Proto
Cap’n Proto · v1.1.0
4
open
NxFilter
Jahastech · v4.7.1.7
4
open
KNIME Analytics Platform
KNIME AG · v5.12.0
4
open
Mi Phone Assistant
小米科技有限责任公司 · v4.2.1028.10
3
open
GitHub CLI
GitHub, Inc. · v2.101.0
3
open
App Installer
Microsoft Corporation · v1.29.290
3
open
Microsoft Visual C++ 2015 UWP Desktop Runtime Package
Microsoft Platform Extensions · v14.0.33728.0
3
open
ClamAV
Cisco Systems, Inc. · v1.5.4
3
open
Malwarebytes Windows Firewall Control
BiniSoft.org · v6.33.0.0
3
open
HashiCorp Terraform
HashiCorp · v1.16.2
3
open
Brave
Brave Software Inc · v153.1.95.104
3
open
Everything
voidtools · v1.4.1.1032
3
open
Veeam Agent for Microsoft Windows
Veeam · v13.1.1.700
3
open
Clean Flash Player 34.0.0.330 Installer
FlashPatch Team · v34.0.0.330
3
open
Sysmon
Sysinternals · v15.22
3
open
MiService
小米科技有限责任公司 · v3.3.0.293
3
open
Wget2
GNU · v2.2.1
3
open