winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/20/2026, 6:17:09 AM.

AtomicParsley
Wez Furlong · v20240608.083822.1ed9031
2
open
KLog
EA4K · v2.5
2
open
IBM Semeru Runtime Open Edition (JRE) 22
Semeru · v22.0.2.9
2
open
Veracode CLI
Veracode, Inc. · v2.52.1
2
open
4K Tokkit
Open Media LLC · v25.1.0.1020
2
open
IBM Semeru Runtime Open Edition (JDK) 22
Semeru · v22.0.2.9
2
open
GnuWin32: Bison
GnuWin32 · v2.4.1.0
2
open
Untis 2025
Untis GmbH · v2025
2
open
Beats heartbeat
Elastic · v9.5.4
2
open
IBM Semeru Runtime Open Edition (JDK) 24
Semeru · v24.0.2.12
2
open
IBM Semeru Runtime Open Edition (JDK) 8
Semeru · v8.0.504.0
2
open
Talk2M Connection Checker
HMS Industrial Networks sa · v3.0.11.45
2
open
SPIM
James Larus · v9.1.24
2
open
Beats auditbeat
Elastic · v9.5.4
2
open
IOTransfer
iTop Inc. · v4.3.1.1562
2
open
Dapr CLI
Dapr · v1.18.2
2
open
minder
mindersec · v0.3.1
2
open
soko
Emil Celik · v0.21.0
2
open
Ais Decoder
Neal Arundale · v3.5.149
2
open
Fade In Professional Screenwriting Software Demo
Fade In Professional Screenwriting Software · v5.0.13.1055
2
open
LilyPond (Unstable)
LilyPond · v2.25.22
2
open
Tidepool Uploader
Tidepool Project · v2.68.0
2
open
DualSafe Password Manager
iTop Inc. · v1.4.0.14
2
open
Tesseract-OCR - open source OCR engine
Tesseract-OCR community · v5.4.0.20240606
1
open