winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 6/20/2026, 12:41:00 PM.

AdoptOpenJDK JDK with Hotspot 15
AdoptOpenJDK · v15.0.2.7
86
open
Liberica JDK 12 Lite
BellSoft · v12.0.2+10
86
open
OpenJDK 11
ojdkbuild open-source project · v11.0.15.1
86
open
Eclipse Temurin JDK with Hotspot 19
Eclipse Adoptium · v19.0.2.7
86
open
Liberica JDK 21 Lite
BellSoft · v21.0.10.10
86
open
AdoptOpenJDK JDK with Hotspot 11
AdoptOpenJDK · v11.0.11.9
86
open
OpenJDK JRE 11
ojdkbuild open-source project · v11.0.15.1
86
open
SapMachine 26 JDK
SapMachine Team · v26.0.1
86
open
Eclipse Temurin JDK with Hotspot 26
Eclipse Adoptium · v26.0.1.8
86
open
ojdkbuild OpenJDK JRE 17
ojdkbuild open-source project · v17.0030.6.1
86
open
Microsoft Build of OpenJDK with Hotspot 11
Microsoft · v11.0.31.11
86
open
Liberica JDK 25 Lite
BellSoft · v25.0.2.12
86
open
Liberica JDK 20 Full
BellSoft · v20.0.2.10
86
open
Liberica JDK 16 Full
BellSoft · v16.0.2.7
86
open
Eclipse Temurin JDK with Hotspot 24
Eclipse Adoptium · v24.0.2.12
86
open
Liberica JDK 12
BellSoft · v12.0.2+10
86
open
Liberica JDK 24 Full
BellSoft · v24.0.2.12
86
open
SapMachine 26 JRE
SapMachine Team · v26.0.1
86
open
Liberica JDK 19 Lite
BellSoft · v19.0.2+9
86
open
SapMachine 23 JDK
SapMachine Team · v23.0.2
86
open
Eclipse Temurin JDK with Hotspot 20
Eclipse Adoptium · v20.0.2.9
86
open
Liberica JDK 17 Lite
BellSoft · v17.0.18.10
86
open
Liberica JDK 11
BellSoft · v11.0.31.11
86
open
Liberica JDK 23 Lite
BellSoft · v23.0.2+9
86
open