winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/21/2026, 12:31:58 AM.

Webp Converter
Vertexshare · v1.2.0000
1
open
OCS Inventory NG Agent
OCS Inventory NG Team · v2.11.0.1
1
open
ReadyAPI VirtServer
SmartBear Software · v3.34.0
1
open
PunkBuster Service Installer
Even Balance, Inc. · v0.994
1
open
SideQuest
Shane Harris · v0.0.12
1
open
SimpleX Chat
SimpleX · v7.0.2
1
open
GraphiQL
Adam Miskiewicz · v0.7.2
1
open
Prowise Reflect
Prowise B.V. · v1.2.0
1
open
RustRover (EAP)
JetBrains s.r.o. · v263.5153.48
1
open
GnuWin32: DiffUtils
GnuWin32 · v2.8.7-1
1
open
万兴录演
Wondershare Software · v8.0.1
1
open
Eclipse IDE for Java and DSL Developers
Eclipse.org Foundation, Inc. · v2026-03
1
open
Supremo
Nanosystems S.r.l. · v5.0.4.3888
1
open
DupScout Enterprise
Flexense Computing Systems Ltd. · v17.3.12
1
open
Deluge BitTorrent Client Beta
Deluge Team · v2.0b1
1
open
Take Command 33
JP Software · v33.0.20.0
1
open
Brotli
Google · v1.2.0
1
open
InfluxDB CLI
InfluxData Inc. · v2.7.5
1
open
ControlUp Real-Time Agent (and Manager)
ControlUp Technologies Ltd · v9.2.5.776
1
open
CORSAIR iCUE 4 Software
Corsair · v4.33.138
1
open
Tera Term 5
TeraTerm Project · v5.6.2
1
open
GMT6
The GMT Team · v6.7.0
1
open
Arq
Haystack Software LLC · v7.48.0.0
1
open
Wasmer
Wasmer, Inc. · v7.4.2
1
open