winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/20/2026, 6:12:22 PM.

Next AI Draw.io
Dayuan Jiang · v0.4.16
1
open
Logi Tune
Logitech · v3.15.62.0
1
open
Kangaroo MySQL
Taozuhong · v9.8.1.906
1
open
Devolutions Gateway
Devolutions · v26.3.0
1
open
Resource Hacker
Angus Johnson · v5.2.8
1
open
GoldenDict
GoldenDict · v1.5.1
1
open
Remote Mouse
Remote Mouse · v4.724
1
open
GitKraken
GitKraken · v12.4.0
1
open
Easy Connection to Screen
Samsung · v6.5.13
1
open
Trading Paints
Rhinode LLC · v2.0.37
1
open
Direct Folders
Code Sector · v4.3.5
1
open
FlexiHub
Electronic Team, Inc. · v7.0.15463
1
open
JetBrains MPS
JetBrains · v2026.1.1
1
open
iTop Screen Recorder
iTop Inc. · v7.0.0.3778
1
open
Windows Service Wrapper
CloudBees, Inc. · v2.12.0.0
1
open
DataSpell (EAP)
JetBrains s.r.o. · v261.21849.35
1
open
Password Importer Standalone
Keeper Security, Inc. · v17.0.4.0
1
open
Dangerzone
Freedom of the Press Foundation · v0.11.0
1
open
Brows3
Brows3 Team · v0.2.45
1
open
gImageReader
Sandro Mani · v3.4.3
1
open
Microsoft Application Inspector
Microsoft · v1.9.55
1
open
UrBackup Server
UrBackup · v2.5.38
1
open
FindLinks
Sysinternals · v1.1
1
open
Azure Batch Explorer
Microsoft Corporation · v2.23.0
1
open