winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/21/2026, 12:31:58 AM.

act
cplee.org · v0.2.89
1
open
Mihomo (GOAMD64=v2)
MetaCubeX · v1.19.31
1
open
TKeySign
Tillitis · v1.1.1
1
open
Flip PDF Plus
WONDER IDEA TECHNOLOGY LIMITED · v7.4.12
1
open
Bitbucket Server
Atlassian · v7.21.23
1
open
nfpm
goreleaser · v2.47.0
1
open
Camunda Modeler
Camunda · v5.51.1
1
open
Arq
Haystack Software LLC · v7.48.0.0
1
open
haus
Kevin Boss · v0.11.0
1
open
Eclipse IDE for Embedded C/C++ Developers
Eclipse.org Foundation, Inc. · v2026-03
1
open
Spring Tools for Eclipse
Broadcom Inc. · v5.0.1.e4.38.0
1
open
DupScout Ultimate
Flexense Computing Systems Ltd. · v17.3.12
1
open
Eclipse IDE for Scout Developers
Eclipse.org Foundation, Inc. · v2026-03
1
open
tiddlywiki-app
oeyoews · v4.8.2
1
open
Unity 2023
Unity Technologies ApS · v2023.2.9f1
1
open
TKeyVerification
Tillitis · v1.0.0
1
open
MongoDB Atlas CLI
MongoDB, Inc. · v1.58.3
1
open
Half-Life Asset Manager
Sam Vanheer · v3.0.0
1
open
万兴恢复专家
Wondershare Software Co.,Ltd. · v9.0.4.3
1
open
AWS IAM Authenticator
Kubernetes SIGs · v0.7.20
1
open
Eclipse IDE for RCP and RAP Developers
Eclipse.org Foundation, Inc. · v2026-06
1
open
iFun Screenshot
IObit · v1.2.0.526
1
open
Groovy 2
The Groovy Team · v2.5.23
1
open
Intel® Processor Identification Utility 8.0.43
Intel Corporation · v8.0.43
1
open