winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/22/2026, 6:19:26 AM.

Dungeon Crawl Stone Soup
DCSS Devteam · v0.34.1
1
open
Columnar
AmitkroutTheDev · v0.0.1
1
open
Payhere Seller
payhere inc. · v3.5.9
1
open
Dashy
futureglobe · v1.0.0
1
open
SpeedFan
Alfredo Milani Comparetti · v4.52
1
open
shiori
Shiori · v1.8.0
1
open
W&T COM Port Redirector Legacy
Wiesemann & Theis GmbH · v3.94
1
open
Miranda IM
Miranda IM Project · v0.10.80
1
open
Singular Recast
Singular · v2.1.0
1
open
Frhed
Raihan Kibria · v1.7.1
1
open
OpenPubkey SSH
OpenPubkey · v0.16.0
1
open
Duo Device Health
Duo Security · v4.4.0.0
1
open
Series Comic Viewer
NAVER WEBTOON Ltd. · v1.0.13
1
open
Eclipse IDE for C/C++ Developers
Eclipse.org Foundation, Inc. · v2026-03
1
open
minisat
PolarGoose / niklasso · v2.2
1
open
FlexiSoftDesigner
SICK AG · v1.9.8.117
1
open
WixTrim - WiX Designer
zelenkov · v1.0.2466.20969
1
open
iTop Screenshot
iTop Inc. · v1.2.3.544
1
open