winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/19/2026, 6:11:47 PM.

Brave Beta
Brave Software Inc · v154.1.97.42
3
open
Snagit 2026
TechSmith Corporation · v26.3.1
3
open
Viber
Rakuten · v28.9.0.0
3
open
hfs
rejetto · v3.2.2
3
open
Git LFS
GitHub, Inc. · v3.8.0
3
open
BurnInTest
Passmark Software · v11.0.1022
3
open
Windows 10 Update Assistant
Microsoft Corporation · v1.4.19041.2183
3
open
JetBrains ReSharper
JetBrains s.r.o. · v2026.2.2
3
open
Account Lockout Status
Microsoft Corporation · v1.0.0.60
3
open
Snagit 2020
TechSmith Corporation · v20.1.8
3
open
Sourcetree
Atlassian · v3.4.32
3
open
Everything Lite
voidtools · v1.4.1.1032
3
open
Snagit 2022
TechSmith Corporation · v22.1.7
3
open
Snagit 2025
TechSmith Corporation · v25.4.1
3
open
Advanced Installer
Caphyon · v24.0
3
open
OSFMount
Passmark Software · v3.1.1003.0
3
open
Volatility Workbench
PassMark Software · v3.0.1014
3
open
PerformanceTest 11
Passmark Software · v11.1.1014.0
3
open
Snagit 2021
TechSmith Corporation · v21.4.7
3
open
Brave Dev
Brave Software Inc · v119.1.61.87
3
open
SUHelper
Lenovo · v1.0.0.22
3
open
Zoom Outlook Plugin
Zoom · v7.1.0
3
open
QNAP QVPN Client
QNAP Systems, Inc. · v2.2.9.1409
3
open
Zstandard
Meta · v1.5.7
3
open