winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/20/2026, 6:17:09 AM.

Altova MobileTogether Designer 10.0
Altova · v10.4
2
open
JetBrains dotTrace
JetBrains s.r.o. · v2026.2.2
2
open
Beats metricbeat
Elastic · v9.5.4
2
open
IBM Semeru Runtime Open Edition (JDK) 16
Semeru · v11.0.23.9
2
open
Sante FFT Imaging
Santesoft LTD · v1.4.4
2
open
WatchGuard Authentication Gateway
WatchGuard · v12.10.2
2
open
IBM Semeru Runtime Open Edition (JRE) 18
Semeru · v18.0.2.9
2
open
minder
stacklok · v0.0.77
2
open
Anyware PCoIP Client
HP Development Company, L.P. · v26.5.4.0
2
open
step
Smallstep · v0.30.6
2
open
Ark
KDE e.V. · v25.1200.2392.0
2
open
JD-GUI
xiaojianzheng · v1.6.8
2
open
Altova MobileTogether Server
Altova · v10.2.0.1
2
open
SWIG
SWIG · v4.4.1
2
open
IBM Semeru Runtime Open Edition (JDK) 19
Semeru · v19.0.2.7
2
open
Caret Beta
caret.io · v4.0.0-rc23
2
open
IBM Semeru Runtime Open Edition (JRE) 11
Semeru · v11.0.32.10
2
open
MP3Gain
Glen Sawyer · v1.2.5
2
open
NoMachine Workgroup Cloud Server
NoMachine S.a.r.l. · v10.1.7
2
open
IBM Semeru Runtime Open Edition (JDK) 23
Semeru · v23.0.2.7
2
open
IBM Semeru Runtime Open Edition (JDK) 8
Semeru · v8.0.504.0
2
open
Veracode CLI
Veracode, Inc. · v2.52.1
2
open
Hyper
ZEIT, Inc. · v3.4.1
2
open
Beats heartbeat
Elastic · v9.5.4
2
open