winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 6/20/2026, 7:24:25 AM.

Vim
Bram Moolenaar et al. · v9.2.0653
216
open
Vim
Bram Moolenaar et al. · v9.2.0670
216
open
ImageMagick Q16-HDRI
ImageMagick Studio LLC · v7.1.2.24
208
open
ImageMagick Q16
ImageMagick Studio LLC · v7.1.2.25
208
open
ImageMagick Q16-HDRI
ImageMagick Studio LLC · v7.1.2.25
208
open
ImageMagick Q16
ImageMagick Studio LLC · v7.1.2.24
208
open
ImageMagick Q8
ImageMagick Studio LLC · v7.1.2.24
208
open
ImageMagick Q8
ImageMagick Studio LLC · v7.1.2.25
208
open
Fuzzy Lookup Add-In For Excel
Microsoft · v1.3.0.0
176
open
PDF-Tools
PDF-XChange Co Ltd. · v11.0.1.0
172
open
Liberica NIK 23 Full (JDK 21)
BellSoft · v23.1.4
167
open
Liberica NIK 24 Full (JDK 22)
BellSoft · v24.0.2
167
open
Liberica NIK 24 (JDK 22)
BellSoft · v24.0.2
167
open
Liberica NIK 22 (JDK 11)
BellSoft · v22.3.5
167
open
JT2Go
Siemens PLM Software · v2606.0.26134
166
open
Wireshark
The Wireshark developer community, https://www.wireshark.org · v4.6.6
160
open
Java(TM) SE Development Kit 26
Oracle Corporation · v26.0.1.0
158
open
Java(TM) SE Development Kit 25
Oracle Corporation · v25.0.3.0
158
open
Java(TM) SE Development Kit 18
Oracle Corporation · v18.0.2.1
158
open
Amazon Corretto 25
Amazon · v25.0.3.9
158
open
Java(TM) SE Development Kit 20
Oracle Corporation · v20.0.2.0
158
open
Java(TM) SE Development Kit 23
Oracle Corporation · v23.0.2.0
158
open
Amazon Corretto 8
Amazon · v1.8.0.492
158
open
Java(TM) SE Development Kit 19
Oracle Corporation · v19.0.2.0
158
open