winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/22/2026, 6:19:26 AM.

Beaker Browser
Paul Frazee · v1.1.0
1
open
Eclipse IDE for PHP Developers
Eclipse.org Foundation, Inc. · v2026-03
1
open
DupScout
Flexense Computing Systems Ltd. · v17.3.12
1
open
Z-Cron
Z-DBackup · v6.4.0.4
1
open
Concourse Fly
Concourse · v8.3.0
1
open
ATLauncher Setup
ATLauncher · v1.3.0.0
1
open
DiskSavvy
Flexense Computing Systems Ltd. · v17.3.14
1
open
Synthesia
Synthesia LLC · v10.9.5903
1
open
Viscosity
SparkLabs Pty Ltd · v1.13.1.1884
1
open
DNS Proxy
AdGuard · v0.83.2
1
open
Prime95
Mersenne Research, Inc. · v30.19b20
1
open
Flat
Agora · v2.3.3
1
open
bat编辑器
xd · v1.0.0
1
open
Royal Server
Royal Apps GmbH · v5.02.50419.0
1
open
InSpec
"Chef Software, Inc <maintainers@chef.io>" · v6.8.24.1
1
open
elvish
elves · v0.21.0
1
open
System Design Load
Carrier · v6.4
1
open
Yana
Lukas Bach · v1.0.16
1
open
Columnar
AmitkroutTheDev · v0.0.1
1
open
GraphQL Playground
Graphcool · v1.8.10
1
open
openexr-viewer
Lambda · v0.6.1
1
open
DxEnterprise
DH2i Company · v26.0.254.0
1
open
Deskfiler
Ilya Lopukhin · v1.2.3
1
open
Dungeon Crawl Stone Soup
DCSS Devteam · v0.34.1
1
open