winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/21/2026, 12:31:58 AM.

Eclipse IDE for Enterprise Java and Web Developers
Eclipse.org Foundation, Inc. · v2026-03
1
open
ISDecisions UserLock Agent
IS Decisions · v12.20.0160
1
open
Mambaforge-pypy3
conda-forge · v24.11.0-1
1
open
WiX Toolset Additional Tools
WiX Toolset · v7.0.0
1
open
Oxygen XML Author
SyncRO Soft · v28.1
1
open
mcp
goreleaser · v0.6.0
1
open
Ferdium
Ferdium Contributors · v7.2.3
1
open
Ledger Live
Ledger Live Team · v4.19.1
1
open
PEAK-Drivers
PEAK-System Technik GmbH · v5.1.3.1189
1
open
Mambaforge
conda-forge · v24.11.0-1
1
open
LightGBM
Microsoft · v4.7.0
1
open
Stove
Smilegate · v3.1.21.0
1
open
Sumo Logic OpenTelemetry Collector
Sumo Logic · v0.160.0.3110
1
open
Wondershare Anireel
Wondershare Software · v2.3.2
1
open
Tera Term
TeraTerm Project · v4.108
1
open
v2ray-core
v2fly · v5.53.0
1
open
EaseUS Todo Backup
EaseUS · v17.5.0
1
open
DupScout Pro
Flexense Computing Systems Ltd. · v17.3.12
1
open
Sumo Logic OpenTelemetry Collector (FIPS)
Sumo Logic · v0.160.0.3110
1
open
EMCO Remote Shutdown 7
EMCO Software · v7.4.4
1
open
DebugView
Sysinternals · v5.02
1
open
PunkBuster Service Installer
Even Balance, Inc. · v0.994
1
open
SyncBackFree
2BrightSparks · v12.1.6.0
1
open
Electron Cash SLP
Electron Cash LLC · v3.6.6
1
open