winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/22/2026, 6:19:26 AM.

youtube-dl
youtube-dl · v2025.11.26
1
open
tiddlywiki-app
oeyoews · v4.8.2
1
open
nfpm
goreleaser · v2.47.0
1
open
Eclipse IDE for Scout Developers
Eclipse.org Foundation, Inc. · v2026-03
1
open
Firebase CLI Tools
Google · v20.18.2
1
open
Chef Infra Client
Chef Software, Inc. · v18.11.11.1
1
open
BaiduPCS-Go
qjfoidnh · v4.0.1
1
open
Viscosity
SparkLabs Pty Ltd · v1.13.1.1884
1
open
Block Load
Carrier · v4.2
1
open
goreleaser
goreleaser · v2.18.1
1
open
Assistive Context-Aware Toolkit
Intel Corporation · v3.13
1
open
Logitech SetPoint
Logitech · v6.90.66
1
open
Groovy 3
The Groovy Team · v3.0.25
1
open
DupScout Server
Flexense Computing Systems Ltd. · v17.3.12
1
open
DiskSavvy
Flexense Computing Systems Ltd. · v17.3.14
1
open
DupScout
Flexense Computing Systems Ltd. · v17.3.12
1
open
Fabric
danielmiessler · v1.4.478
1
open
Maltego
Maltego · v4.9.3
1
open
Cilium CLI
Cilium · v0.20.0
1
open
Airtable
Airtable · v1.4.5
1
open
Beaker Browser
Paul Frazee · v1.1.0
1
open
ATLauncher Setup
ATLauncher · v1.3.0.0
1
open
Puppet Bolt
Puppet, Inc. · v3.27.1
1
open
Pexip
Pexip AS · v2.2.1117.0
1
open