winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/3/2026, 6:21:32 PM.

EasyClaw
EasyClaw Team · v1.3.44
406
open
ClawPanel
openclaw · v0.14.0
406
open
360安全龙虾
360安全中心 · v2.2.1140.64
406
open
EasyClaw
EasyClaw Team · v1.3.44
406
open
SiYuan
Yunnan Liandi Technology Co., Ltd. · v3.6.5
55
open
Claude Code
Anthropic PBC · v2.1.126
25
open
opencode
SST · v1.14.33
25
open
Jellyfin2Samsung
Jellyfin2Samsung · v2.2.0.8
19
open
RcloneView
Bdrive Inc · v0.2.157
3
open
Go Programming Language
https://go.dev · v1.26.2
132
open
OpenSSL Light LTS
Shining Light Productions · v3.5.6
66
open
OpenSSL Light
Shining Light Productions · v4.0.0
66
open
OpenSSL
Shining Light Productions · v4.0.0
66
open
FireDaemon OpenSSL 3
FireDaemon · v4.0.0.1
66
open
Wazuh Agent
Wazuh, Inc. · v4.14.5
41
open
Wasmtime
Crane Station · v44.0.1
38
open
Wasmtime
Bytecode Alliance · v44.0.0
38
open
Microsoft ASP.NET Core Hosting Bundle 10.0
Microsoft Corporation · v10.0.7
20
open
Microsoft ASP.NET Core Hosting Bundle 5.0
Microsoft Corporation · v5.0.17
20
open
Microsoft ASP.NET Core Hosting Bundle 3.1
Microsoft Corporation · v3.1.32
20
open
Microsoft ASP.NET Core Hosting Bundle 11.0 Preview
Microsoft Corporation · v11.0.0-preview.3.26207.106
20
open
Microsoft ASP.NET Core Hosting Bundle 7.0
Microsoft Corporation · v7.0.20
20
open
Microsoft ASP.NET Core Runtime 3.1
Microsoft Corporation · v3.1.32
20
open
Microsoft ASP.NET Core Hosting Bundle 9.0
Microsoft Corporation · v9.0.15
20
open