winget packages with open CVEs
2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/20/2026, 6:17:09 AM.
Apache Parquet for .NET
aloneguid · v5.1.1
2
open
AdGuardHome
AdGuard · v0.108.0-b.85
2
open
tidy-html5
HTML Tidy Advocacy Community Group · v5.8.0
2
open
PDQ Deploy
PDQ.com · v20.1.21.0
2
open
XnView MP
Pierre-e Gougelet · v1.11.6.0
2
open
Synology Presto
Synology, Inc. · v2.1.3.0672
2
open
Windows App Development CLI
Microsoft Corporation · v0.6.1
2
open
USB Network Gate
Electronic Team · v11.0.2772
2
open
NoMachine Cloud Server
NoMachine S.a.r.l. · v10.1.7
2
open
StepMania 5
StepMania · v5.0.12
2
open
NoMachine Enterprise Cloud Server Cluster
NoMachine S.a.r.l. · v10.1.7
2
open
innovaphone myApps
innovaphone AG · v15.1.0665
2
open
IBM Semeru Runtime Open Edition (JDK) 26
Semeru · v26.0.2.10
2
open
Untis 2026
Untis GmbH · v2026
2
open
IBM Semeru Runtime Open Edition (JRE) 26
Semeru · v26.0.2.10
2
open
IBM Semeru Runtime Open Edition (JDK) 17
Semeru · v17.0.20.10
2
open
IBM Semeru Runtime Open Edition (JDK)
Semeru · v21.0.12.10
2
open
IBM Semeru Runtime Open Edition (JRE) 19
Semeru · v19.0.2.7
2
open
Yubico PIV Tool
Yubico AB · v2.7.3
2
open
IBM Semeru Runtime Open Edition (JRE) 16
Semeru · v11.0.23.9
2
open
ConEmu
ConEmu-Maximus5 · v11.230.7240
2
open
Jitsi Meet
Jitsi Team · v2026.8.0
2
open
Bot Framework Composer
Microsoft Corporation · v2.1.2
2
open
Altova MobileTogether Server Advanced Edition
Altova · v3.19
2
open