winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/20/2026, 6:17:09 AM.

NoMachine Small Business Cloud Server
NoMachine S.a.r.l. · v8.16.1
2
open
ConEmu
ConEmu-Maximus5 · v11.230.7240
2
open
N Air 実験版
koizuka · v1.1.20260909-unstable.1
2
open
Altova MobileTogether Server Advanced Edition
Altova · v3.19
2
open
Jitsi Meet
Jitsi Team · v2026.8.0
2
open
Object2VR - Garden Gnome Software
Garden Gnome GmbH · v4.0.2
2
open
Bot Framework Composer
Microsoft Corporation · v2.1.2
2
open
Plantronics Hub Software
Plantronics, Inc. · v3.25.54307.37251
2
open
IBM Semeru Runtime Open Edition (JRE) 16
Semeru · v11.0.23.9
2
open
Infinity Connect
Pexip AS · v1.14.0
2
open
WinZip
Corel Corporation · v29.0.16416
2
open
IBM Semeru Runtime Open Edition (JRE) 23
Semeru · v23.0.2.7
2
open
Focalboard
Mattermost · v7.11.3
2
open
IBM Semeru Runtime Open Edition (JDK) 20
Semeru · v20.0.2.9
2
open
EasyABC
Seymour Shlien · v1.3.8.6
2
open
syncthingctl
Martchus · v2.1.5
2
open
Intel Binary Configuration Tool for Intel FSP
Intel Corporation · v3.4.5
2
open
eBuddy
HMS Industrial Networks sa · v12.5.0.32100
2
open
Halloy
Squidowl · v2026.8.0
2
open
IBM Semeru Runtime Open Edition (JRE) 20
Semeru · v20.0.2.9
2
open
Sante FFT Imaging
Santesoft LTD · v1.4.4
2
open
step
Smallstep · v0.30.6
2
open
JetBrains dotTrace
JetBrains s.r.o. · v2026.2.2
2
open
Beats metricbeat
Elastic · v9.5.4
2
open