winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/21/2026, 12:31:58 AM.

SideQuest
Shane Harris · v0.0.12
1
open
VRCX
VRCX · v2026.09.16
1
open
Take Command 33
JP Software · v33.0.20.0
1
open
Enpass
Enpass Technologies Inc. · v6.12.6.2723
1
open
Intel PresentMon
Intel Corporation · v0.6.0.0
1
open
Webp Converter
Vertexshare · v1.2.0000
1
open
Evope
Evope, Co. · v1.1.7.28
1
open
SyncBackFree
2BrightSparks · v12.1.6.0
1
open
OCS Inventory NG Agent
OCS Inventory NG Team · v2.11.0.1
1
open
GTK# for .NET
Mono Project · v2.12.45
1
open
CORSAIR iCUE 4 Software
Corsair · v4.33.138
1
open
Whois
Sysinternals · v1.21
1
open
SymCrypt
Microsoft · v103.8.0
1
open
Terminal Services Manager
LizardSystems · v26.04.3
1
open
OpenDeck
Aman Khanna (nekename) · v2.14.0
1
open
SimpleX Chat
SimpleX · v7.0.2
1
open
Prowise Reflect
Prowise B.V. · v1.2.0
1
open
Trezor Bridge
SatoshiLabs · v2.0.27
1
open
Groovy 5
The Groovy Team · v5.1.1
1
open
sccache
Mozilla · v0.17.0
1
open
Amarok
KDE · v2.8.0
1
open
Supremo
Nanosystems S.r.l. · v5.0.4.3888
1
open
GraphiQL
Adam Miskiewicz · v0.7.2
1
open
GnuWin32: DiffUtils
GnuWin32 · v2.8.7-1
1
open