winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 6/20/2026, 12:51:34 AM.

EasyClaw
EasyClaw Team · v1.3.69.655
532
open
ClawWork
clawwork-ai · v0.0.16
532
open
OpenSSL
Shining Light Productions · v4.0.1
84
open
OpenSSL Light
Shining Light Productions · v4.0.1
84
open
OpenSSL Light LTS
Shining Light Productions · v3.5.6
84
open
FireDaemon OpenSSL
FireDaemon · v4.0.1
84
open
Microsoft Visual Studio Code
Microsoft Corporation · v1.124.2
59
open
Microsoft Visual Studio Code Insiders
Microsoft Corporation · v1.126.0
59
open
Microsoft Visual Studio Code CLI
Microsoft Corporation · v1.125.0
59
open
Microsoft Visual Studio Code Insiders CLI
Microsoft Corporation · v1.126.0
59
open
VS Code Config Helper
github · v4.0.10
59
open
Codium
Alex313031 · v1.93.1.24277
59
open
Rocket.Chat
Rocket.Chat Support · v4.14.1
54
open
ESP-IDF Installation Manager CLI
Espressif Systems · v0.14.1
27
open
Sunshine
LizardByte · v2026.516.143833
11
open
GLab
GitLab · v1.103.0
1074
open
Adobe Acrobat Reader (32-bit)
Adobe Systems Incorporated · v26.001.21662
521
open
Adobe Acrobat Reader (64-bit)
Adobe · v26.001.21677
521
open
Adobe Acrobat Pro
Adobe · v26.001.21529
520
open
MySQL
Oracle Corporation · v8.4.9
519
open
Microsoft Office 2010 Filter Packs
Microsoft Corporation · v14.0.4730.1010
454
open
Adobe Acrobat 2020
Adobe · v20.001.30002
418
open
Mozilla Firefox ESR (gn)
Mozilla · v140.12.0
361
open
Mozilla Firefox ESR (en-US)
Mozilla · v140.12.0
361
open