winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/19/2026, 6:11:47 PM.

Chia
Chia Network · v2.7.4
3
open
Google Web Designer
Google LLC. · v14.3.0.0
3
open
Snagit 2023
TechSmith Corporation · v23.2.7
3
open
AppInstaller File Builder
Microsoft · v1.2020.221.0
3
open
AXIS Camera Station Device Compatibility Tool
Axis Communications AB · v5.57.33556
3
open
openSUSE Tumbleweed
SUSE · v26204.10.358.0
3
open
YARA-X
VirusTotal · v1.20.0
3
open
Hashicorp Terraform RC
Hashicorp · v1.8.0-rc1
3
open
iTop VPN
iTop Inc. · v7.6.0.6921
3
open
ArmouryCrate
Asus · v6.5.7.0
3
open
Hashicorp Terraform Beta
HashiCorp · v1.7.0-beta2
3
open
OSPRay
Intel Corporation · v3.2.0
3
open
lobster
Wouter van Oortmerssen · v2026.6
3
open
Hashicorp Terraform Alpha
HashiCorp · v1.10.0-alpha20240828
3
open
Comodo Dragon
Comodo · v134.0.6998.179
3
open
Quill
Anchore Inc · v0.7.1
3
open
Octopus Deploy Tentacle
Octopus Deploy Pty. Ltd. · v8.3.3164
3
open
Beats filebeat
Elastic · v9.5.4
3
open
NAVER MYBOX Explorer
NAVER Corp. · v3.0.6.116
3
open
Splashtop Personal
Splashtop Inc. · v3.7.600.0
3
open
Puppet Agent
Puppet Inc · v8.10.0
3
open
IObit Unlocker
IObit · v1.3.0.12
3
open
OSForensics
PassMark Software · v11.1.1016.0
3
open
LocalStack CLI
LocalStack · v2026.8.0
3
open