winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 6/21/2026, 12:56:54 AM.

winpython-pypy
winpython · v7.0.20230928
42
open
winpython-dot-pypy
winpython · v3.8.12.3
42
open
Python 3.4
Python Software Foundation · v3.4.4
42
open
Python 3.7
Python Software Foundation · v3.7.9
42
open
Python Launcher
Vinay Sajip · v1.0.1.6
42
open
Python 3.3
Python Software Foundation · v3.3.5
42
open
winpython-dot
winpython · v6.4.20230625final
42
open
Wazuh Agent
Wazuh, Inc. · v4.14.5
41
open
Wasmtime
Crane Station · v45.0.2
40
open
Wasmtime
Bytecode Alliance · v45.0.2
40
open
Tenable Nessus
Tenable, Inc. · v10.12.0.20184
39
open
Autodesk Design Review
Autodesk, Inc. · v15.3.0.5
39
open
Zimbra Desktop
Synacor, Inc. · v4.46.0
39
open
Exiv2
Exiv2 · v0.28.8
38
open
Elasticsearch
Elastic · v7.16.3
37
open
Confluence Long Term Support
Atlassian · v10.2.6
35
open
M-Files Online
M-Files Corporation · v23.4.12528.8
34
open
HashiCorp Nomad
HashiCorp · v2.0.3
34
open
Electron
OpenJS Foundation · v36.9.5
33
open
Electron
OpenJS Foundation · v34.5.8
33
open
Electron
OpenJS Foundation · v40.10.4
33
open
Electron
OpenJS Foundation · v37.10.3
33
open
Electron
OpenJS Foundation · v33.4.11
33
open
Electron
OpenJS Foundation · v41.8.0
33
open