winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/4/2026, 7:06:59 AM.

ImageMagick Q16-HDRI
ImageMagick Studio LLC · v7.1.2.21
179
open
ImageMagick Q16
ImageMagick Studio LLC · v7.1.2.21
179
open
ImageMagick Q8
ImageMagick Studio LLC · v7.1.2.21
179
open
ImageMagick Q8
ImageMagick Studio LLC · v7.1.2.21
179
open
PDF-Tools
Tracker Software Products (Canada) Ltd. · v10.8.2.407
172
open
Liberica NIK 23 Full (JDK 21)
BellSoft · v23.1.4
167
open
Liberica NIK 24 (JDK 22)
BellSoft · v24.0.2
167
open
Liberica NIK 24 Full (JDK 22)
BellSoft · v24.0.2
167
open
Liberica NIK 22 (JDK 11)
BellSoft · v22.3.5
167
open
JT2Go
Siemens PLM Software · v2512.0.26040
166
open
Fuzzy Lookup Add-In For Excel
Microsoft · v1.3.0.0
162
open
Wireshark
The Wireshark developer community, https://www.wireshark.org · v4.6.5
158
open
Java(TM) SE Development Kit 26
Oracle Corporation · v26.0.1.0
158
open
Java(TM) SE Development Kit 19
Oracle Corporation · v19.0.2.0
158
open
Amazon Corretto 20
Amazon · v20.0.2.10
158
open
Java(TM) SE Development Kit 18
Oracle Corporation · v18.0.2.1
158
open
Java(TM) SE Development Kit 20
Oracle Corporation · v20.0.2.0
158
open
Amazon Corretto 24
Amazon · v24.0.2.12
158
open
Amazon Corretto 25
Amazon · v25.0.3.9
158
open
Java(TM) SE Development Kit 22
Oracle Corporation · v22.0.2.0
158
open
Java(TM) SE Development Kit 25
Oracle Corporation · v25.0.3.0
158
open
Amazon Corretto 23
Amazon · v23.0.2.7
158
open
Java(TM) SE Development Kit 17
Oracle Corporation · v17.0.12.0
158
open
Java(TM) SE Development Kit 23
Oracle Corporation · v23.0.2.0
158
open