winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/4/2026, 12:38:28 PM.

Eclipse Temurin JDK with Hotspot 21
Eclipse Adoptium · v21.0.11.10
86
open
Liberica JDK 18 Lite
BellSoft · v18.0.2.1+1
86
open
Liberica JDK 13 Full
BellSoft · v13.0.2+9
86
open
Liberica JDK 16 Full
BellSoft · v16.0.2.7
86
open
Eclipse Temurin JDK with Hotspot 23
Eclipse Adoptium · v23.0.2.7
86
open
Liberica JDK 14 Full
BellSoft · v14.0.2.13
86
open
Liberica JDK 15
BellSoft · v15.0.2.10
86
open
Liberica JDK 17 Lite
BellSoft · v17.0.18.10
86
open
SapMachine 21 JRE
SapMachine Team · v21.0.11
86
open
Liberica JDK 12 Lite
BellSoft · v12.0.2+10
86
open
Liberica JDK 18
BellSoft · v18.0.2.101
86
open
SapMachine 17 JRE
SapMachine Team · v17.0.19
86
open
Liberica JDK 20 Lite
BellSoft · v20.0.2.10
86
open
AdoptOpenJDK JDK with Hotspot 16
AdoptOpenJDK · v16.0.1.9
86
open
Liberica JDK 24
BellSoft · v24.0.2.12
86
open
AdoptOpenJDK JDK with Hotspot 8
AdoptOpenJDK · v8.0.292.10
86
open
SapMachine 22 JRE
SapMachine Team · v22.0.2
86
open
Eclipse Temurin JDK with Hotspot 26
Eclipse Adoptium · v26.0.0.35
86
open
AdoptOpenJDK JDK with Eclipse OpenJ9 17
AdoptOpenJDK · v17.0.0.18
86
open
Liberica JDK 13 Lite
BellSoft · v13.0.2+9
86
open
AdoptOpenJDK JDK with Hotspot 17
AdoptOpenJDK · v17.0.0.20
86
open
Eclipse Temurin JDK with Hotspot 22
Eclipse Adoptium · v22.0.2.9
86
open
Liberica JDK 13
BellSoft · v13.0.2+9
86
open
Liberica JDK 26 Full
BellSoft · v26.0.1.10
86
open