winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/20/2026, 6:12:22 PM.

Another Redis Desktop Manager
Another · v1.7.4
1
open
PendMoves
Sysinternals · v1.2
1
open
yt-dlg
yt-dlg · v1.8.5
1
open
Ferdium Nightly
Ferdium Contributors · v7.2.4-nightly.3
1
open
Wisenet WAVE Server
Hanwha · v6.0.3.40736
1
open
3CX Call Flow Designer
3CX Ltd · v20.2.84
1
open
Sublime Text 3
Sublime HQ Pty Ltd · v3.2.2
1
open
Sublime Text 4
SublimeHQ · v4143
1
open
Ultimaker Cura
UltiMaker · v5.13.0
1
open
Microsoft Printer Metadata Troubleshooter Tool
Microsoft · v1.0.0.1
1
open
TKey SSH Agent
Tillitis · v1.1.1.0
1
open
Wondershare UniConverter 13
Wondershare Software · v13.6.4.1
1
open
Kate (AppX / Portable)
KDE e.V. · v26.403.12063.0
1
open
小黑盒加速器
Qingfeng · v1.1.92
1
open
JetBrains Gateway
JetBrains s.r.o. · v2026.2.2
1
open
Royal TS 5
Royal Apps GmbH · v5.04.60415.0
1
open
FlexiPDF
SoftMaker Software GmbH · v2025.414
1
open
Royal TS V7
Royal Apps GmbH · v7.4.50819.0
1
open
Archi
Phillip Beauvoir & Jean-Baptiste Sarrodie · v5.10
1
open
Popcorn-Time
Popcorn Time · v0.0.153-129
1
open
k3d
k3d · v5.9.0
1
open
ZeroTier One
ZeroTier, Inc. · v1.16.2
1
open
jaeger
jaegertracing · v2.21.0
1
open
JetBrains MPS (EAP)
JetBrains · vMPS-262.9437.166
1
open