winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/4/2026, 6:36:27 PM.

Liberica JDK 12 Lite
BellSoft · v12.0.2+10
86
open
Liberica JDK 8 Lite
BellSoft · v8.0.482.10
86
open
AdoptOpenJDK JDK with Eclipse OpenJ9 17
AdoptOpenJDK · v17.0.0.18
86
open
Liberica JDK 19 Full
BellSoft · v19.0.2.9
86
open
OpenJDK 14
ojdkbuild open-source project · v14.0.1.1
86
open
SapMachine 21 JDK
SapMachine Team · v21.0.11
86
open
Eclipse Temurin JDK with Hotspot 26
Eclipse Adoptium · v26.0.0.35
86
open
Liberica JDK 26 Full
BellSoft · v26.0.1.10
86
open
Liberica JDK 20 Lite
BellSoft · v20.0.2.10
86
open
AdoptOpenJDK JDK with Hotspot 11
AdoptOpenJDK · v11.0.11.9
86
open
Liberica JDK 16
BellSoft · v16.0.2.7
86
open
Eclipse Temurin JDK with Hotspot 11
Eclipse Adoptium · v11.0.31.11
86
open
Microsoft Build of OpenJDK with Hotspot 16
Microsoft · v16.0.2.7
86
open
Eclipse Temurin JDK with Hotspot 18
Eclipse Adoptium · v18.0.2.101
86
open
OpenJDK 13
ojdkbuild open-source project · v13.0.3.1
86
open
Eclipse Temurin JRE with Hotspot 18
Eclipse Adoptium · v18.0.2.101
86
open
ojdkbuild OpenJDK 17
ojdkbuild open-source project · v17.0030.6.1
86
open
ojdkbuild OpenJDK
ojdkbuild open-source project · v1.8.3321.9
86
open
OpenJDK 11
ojdkbuild open-source project · v11.0.15.1
86
open
Devolutions Server Console
Devolutions inc. · v2026.1.15.0
81
open
Microsoft .NET Windows Desktop Runtime 8.0
Microsoft Corporation · v8.0.26
80
open
Microsoft .NET SDK 6.0
Microsoft Corporation · v6.0.428
80
open
Microsoft .NET Windows Desktop Runtime 6.0
Microsoft Corporation · v6.0.36
80
open
Microsoft .NET SDK 10.0
Microsoft Corporation · v10.0.203
80
open