winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/20/2026, 6:12:22 PM.

EPUB File Reader
SoftSea · v2025-09
1
open
Sublime Text 4
SublimeHQ · v4143
1
open
Royal TS 5
Royal Apps GmbH · v5.04.60415.0
1
open
Code::Blocks
The Code::Blocks Team · v25.03
1
open
flatbuffers
Google, Inc. · v25.12.19
1
open
网易有道翻译
网易公司 · v11.3.16.0
1
open
Ctrl2Cap
Sysinternals · v3.0
1
open
Resource Hacker
Angus Johnson · v5.2.8
1
open
Modbus Poll
Witte Software · v13.2.1.2558
1
open
Direct Folders
Code Sector · v4.3.5
1
open
CORSAIR iCUE 3 Software
Corsair · v3.38.88
1
open
DiskSavvy Pro
Flexense Computing Systems Ltd. · v17.3.14
1
open
PC Clone
Huawei Device Co., Ltd. · v14.0.7.240(C233)
1
open
Electron Cash
Electron Cash LLC · v4.4.3
1
open
WebDL
Timber1900 · vv11.3.1
1
open
GoldenDict
GoldenDict · v1.5.1
1
open
Aqua (Public Preview)
JetBrains s.r.o. · v241.15989.156
1
open
Windows Service Wrapper
CloudBees, Inc. · v2.12.0.0
1
open
Mihomo (GOAMD64=v1)
MetaCubeX · v1.19.31
1
open
DataSpell (EAP)
JetBrains s.r.o. · v261.21849.35
1
open
iTop Screen Recorder
iTop Inc. · v7.0.0.3778
1
open
Dangerzone
Freedom of the Press Foundation · v0.11.0
1
open
Password Importer Standalone
Keeper Security, Inc. · v17.0.4.0
1
open
FindLinks
Sysinternals · v1.1
1
open