winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/4/2026, 12:38:28 PM.

Microsoft Build of OpenJDK with Hotspot 21
Microsoft · v21.0.10.7
86
open
Eclipse Temurin JDK with Hotspot 19
Eclipse Adoptium · v19.0.2.7
86
open
SapMachine 25 JDK
SapMachine Team · v25.0.3
86
open
Liberica JDK 21 Lite
BellSoft · v21.0.10.10
86
open
Liberica JDK 22
BellSoft · v22.0.2.11
86
open
Liberica JDK 14 Lite
BellSoft · v14.0.2+13
86
open
Liberica JDK 17 Full
BellSoft · v17.0.19.11
86
open
AdoptOpenJDK JDK with Hotspot 17
AdoptOpenJDK · v17.0.0.20
86
open
Liberica JDK 14 Full
BellSoft · v14.0.2.13
86
open
Liberica JDK 15
BellSoft · v15.0.2.10
86
open
Liberica JDK 24
BellSoft · v24.0.2.12
86
open
Liberica JDK 25 Lite
BellSoft · v25.0.2.12
86
open
Liberica JDK 13 Lite
BellSoft · v13.0.2+9
86
open
Liberica JDK 19 Lite
BellSoft · v19.0.2+9
86
open
Liberica JDK 13
BellSoft · v13.0.2+9
86
open
Liberica JDK 12 Lite
BellSoft · v12.0.2+10
86
open
Eclipse Temurin JDK with Hotspot 16
Eclipse Adoptium · v16.0.2.7
86
open
AdoptOpenJDK JDK with Hotspot 15
AdoptOpenJDK · v15.0.2.7
86
open
Microsoft Build of OpenJDK with Hotspot 25
Microsoft · v25.0.3.9
86
open
SapMachine 22 JDK
SapMachine Team · v22.0.2
86
open
Liberica JDK 17
BellSoft · v17.0.19.11
86
open
Liberica JDK 23 Lite
BellSoft · v23.0.2+9
86
open
Liberica JDK 18
BellSoft · v18.0.2.101
86
open
Liberica JDK 15 Full
BellSoft · v15.0.2.10
86
open