winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/20/2026, 6:12:22 PM.

Amazon Redshift ODBC Driver
Amazon Web Services, Inc. · v1.5.20.1024
1
open
Oxygen JSON Editor
SyncRO Soft · v28.1
1
open
Aqua (Public Preview)
JetBrains s.r.o. · v241.15989.156
1
open
Yank Note
purocean · v3.92.1
1
open
网易有道翻译
网易公司 · v11.3.16.0
1
open
Microsoft Promptflow
Microsoft Corporation · v1.17.1
1
open
DebugView
Sysinternals · v5.02
1
open
IEC104 Server Simulator
Redisant, Inc. · v1.2.0.7
1
open
v2ray-core
v2fly · v5.53.0
1
open
SideQuest
Shane Harris · v0.10.42
1
open
UltraISO Premium
EZB Systems, Inc. · v9.76
1
open
Windows Migration Assistant
Apple Inc. · v3.0.1.0
1
open
Royal TS 6
Royal Apps GmbH · v6.1.61019.0
1
open
Proximity
Cisco Systems, Inc. · v4.0.0.0
1
open
Stove
Smilegate · v3.1.21.0
1
open
RustRover
JetBrains s.r.o. · v2026.2.3
1
open
Sumo Logic OpenTelemetry Collector (FIPS)
Sumo Logic · v0.160.0.3110
1
open
Navicat for Redis
PremiumSoft CyberTech Ltd. · v17.3.11
1
open
DupScout Pro
Flexense Computing Systems Ltd. · v17.3.12
1
open
ISDecisions UserLock Agent
IS Decisions · v12.20.0160
1
open
Intel System Support Utility
Intel · v4.3.2.0
1
open
LightGBM
Microsoft · v4.7.0
1
open
PEAK-Drivers
PEAK-System Technik GmbH · v5.1.3.1189
1
open
Mambaforge
conda-forge · v24.11.0-1
1
open