winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/5/2026, 12:40:04 AM.

Autodesk Design Review
Autodesk, Inc. · v15.3.0.5
39
open
PostgreSQL 16
PostgreSQL Global Development Group · v16.13-3
39
open
PostgreSQL 10
PostgreSQL Global Development Group · v10
39
open
psqlodbc (mimalloc version)
PostgreSQL Global Development Group · v18.00.0001
39
open
PostgreSQL 12
PostgreSQL Global Development Group · v12.22-1
39
open
PostgreSQL 14
PostgreSQL Global Development Group · v14.22-3
39
open
PostgreSQL 11
PostgreSQL Global Development Group · v11
39
open
PostgreSQL 13
PostgreSQL Global Development Group · v13.23-1
39
open
psqlodbc
PostgreSQL Global Development Group · v18.00.0001
39
open
Exiv2
Exiv2 · v0.28.8
38
open
Elasticsearch
Elastic · v7.16.3
37
open
Confluence Long Term Support
Atlassian · v10.2.6
35
open
M-Files Online
M-Files Corporation · v23.4.12528.8
34
open
HashiCorp Nomad
HashiCorp · v2.0.0
34
open
Electron
OpenJS Foundation · v36.9.5
33
open
Electron
OpenJS Foundation · v40.9.3
33
open
Electron
OpenJS Foundation · v41.5.0
33
open
Electron
OpenJS Foundation · v34.5.8
33
open
Electron
OpenJS Foundation · v37.10.3
33
open
Electron
OpenJS Foundation · v33.4.11
33
open
Electron
OpenJS Foundation · v35.7.5
33
open
Electron
OpenJS Foundation · v39.8.9
33
open
Electron
OpenJS Foundation · v38.8.6
33
open
NASM
NASM · v3.01
32
open