winget packages with open CVEs
107 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/1/2026, 12:38:21 AM.
SketchUp Viewer
Trimble, Inc. · v22.0.316
26
open
Microsoft Teams
Microsoft Corporation · v26072.521.4595.7966
19
open
Azul Zulu JDK 20
Azul Systems, Inc. · v20.32.11
19
open
Nginx UI
0xJacky · v2.3.10
17
open
7-Zip
Igor Pavlov · v26.01
13
open
Notepad++
Notepad++ Team · v8.9.4
11
open
全民K歌
腾讯科技（深圳）有限公司 · v2.21.170.63
11
open
Cinema 4D 2025
Maxon · v2025.3.3
11
open
WinRAR
win.rar GmbH · v7.21.0
10
open
SketchUp 2025
Trimble, Inc. · v25.0.660
9
open
Windows Admin Center (v2)
Microsoft Corporation · v2.6.6.18
8
open
Microsoft Power BI Report Server
Microsoft Corporation · v1.25.9558.32914
8
open
LLVM MinGW (UCRT runtime)
Martin Storsjö · v22.1.4-20260421
8
open
Microsoft Azure Service Fabric
Microsoft Corporation · v11.3.475.1
7
open
PowerShell Universal Desktop
Ironman Software, LLC · v4.0.12
7
open
FileCloud Drive
CodeLathe Technologies Inc · v23.251.0.9130
6
open
TheiaIDE
Eclipse Theia · v1.70.200
6
open
Azure Functions Core Tools
Microsoft · v4.10.0
5
open
Xbox Game Package Manager
Microsoft Corporation · v3.1.7
4
open
微信开发者工具
腾讯科技(广州)有限公司 · v2.01.2510290
4
open
Deno
Deno Land Inc. · v2.7.14
3
open
Brave Beta
Brave Software Inc · v148.1.91.132
3
open
Power Automate for desktop
Microsoft Corporation · v2.67.00143.26090
3
open
OrgCharting
EdrawSoft · v1.4
3
open