winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/20/2026, 6:17:09 AM.

CLion (EAP)
JetBrains s.r.o. · v262.8665.65
2
open
Crossplane CLI
Crossplane · v2.4.1
2
open
NoMachine Enterprise Desktop
NoMachine S.a.r.l. · v10.1.7
2
open
360安全浏览器
360安全中心 · v16.1.2000.64
2
open
GGPKG Viewer
Garden Gnome Software · v1.6.1
2
open
geckodriver
Mozilla · v0.37.1
2
open
JD-GUI Duo
Nicolas Baumann · v2.0.114
2
open
IBM Semeru Runtime Open Edition (JDK) 18
Semeru · v18.0.2.9
2
open
WinZip Self-Extractor
WinZip Computing, S.L. · v4.0.12218.0
2
open
360游戏浏览器
360安全中心 · v13.6.1047.0
2
open
Genymotion
Genymobile · v3.10.0
2
open
SoftMaker Office 2021
SoftMaker Software GmbH · v21.0.5344
2
open
Arduino IDE Beta
Arduino SA · v2.0.0.0
2
open
step-ca
Smallstep · v0.30.2
2
open
Kubernetes - Minikube - A Local Kubernetes Development Environment
Kubernetes · v1.39.0
2
open
Beats winlogbeat
Elastic · v9.5.4
2
open
Unified Remote Server
Unified Intents AB · v3.13.0
2
open
IBM Semeru Runtime Open Edition (JRE) 17
Semeru · v17.0.20.10
2
open
FreedroidRPG
The Freedroid Team · v1.0
2
open
AdGuardHome
AdGuard · v0.108.0-b.85
2
open
tidy-html5
HTML Tidy Advocacy Community Group · v5.8.0
2
open
PDQ Deploy
PDQ.com · v20.1.21.0
2
open
IBM Semeru Runtime Open Edition (JRE) 24
Semeru · v24.0.2.12
2
open
Microsoft 365 Agents Playground
Microsoft Corporation · v0.2.27
2
open