winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 6/20/2026, 6:33:41 PM.

Liberica JDK 16 Full
BellSoft · v16.0.2.7
86
open
SapMachine 22 JRE
SapMachine Team · v22.0.2
86
open
Liberica JDK 15
BellSoft · v15.0.2.10
86
open
Liberica JDK 24
BellSoft · v24.0.2.12
86
open
Liberica JDK 23 Lite
BellSoft · v23.0.2+9
86
open
Liberica JDK 18
BellSoft · v18.0.2.101
86
open
Liberica JDK 25
BellSoft · v25.0.3.11
86
open
Liberica JDK 26 Full
BellSoft · v26.0.1.10
86
open
Liberica JDK 26
BellSoft · v26.0.1.10
86
open
Liberica JDK 19 Full
BellSoft · v19.0.2.9
86
open
Liberica JDK 23
BellSoft · v23.0.2.9
86
open
Liberica JDK 20
BellSoft · v20.0.2.10
86
open
Liberica JDK 20 Full
BellSoft · v20.0.2.10
86
open
Liberica JDK 15 Full
BellSoft · v15.0.2.10
86
open
Liberica JDK 21 Full
BellSoft · v21.0.11.11
86
open
Liberica JDK 17
BellSoft · v17.0.19.11
86
open
Liberica JDK 21
BellSoft · v21.0.11.11
86
open
Liberica JDK 12
BellSoft · v12.0.2+10
86
open
Liberica JDK 20 Lite
BellSoft · v20.0.2.10
86
open
Liberica JDK 16 Lite
BellSoft · v16.0.2+7
86
open
Liberica JDK 15 Lite
BellSoft · v15.0.2+10
86
open
SapMachine 17 JRE
SapMachine Team · v17.0.19
86
open
SapMachine 26 JRE
SapMachine Team · v26.0.1
86
open
Eclipse Temurin JDK with Hotspot 23
Eclipse Adoptium · v23.0.2.7
86
open