winget packages with open CVEs
2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 6/21/2026, 7:42:25 AM.
Electron
OpenJS Foundation · v39.8.10
33
open
Electron
OpenJS Foundation · v35.7.5
33
open
Electron
OpenJS Foundation · v38.8.6
33
open
NASM
NASM · v3.01
32
open
Hubble
Cilium · v0.12.0
31
open
HashiCorp Consul
HashiCorp · v2.0.1
31
open
Microsoft OLE DB Driver for SQL Server
Microsoft Corporation · v19.4.1.0
30
open
JetBrains Hub
JetBrains · v23.1.16990
30
open
Qt Designer
Michael Herrmann · v5.11.1
29
open
Another Qt installer
Hiroshi Miura · v3.3.0
29
open
QtCreator
The Qt Company Ltd · v19.0.0
29
open
LibreOffice SDK
The Document Foundation · v26.2.4.2
28
open
Kubernetes CLI
The Kubernetes Authors · v1.36.2
28
open
LibreOffice Help Pack
The Document Foundation · v26.2.4.2
28
open
Sante DICOM Viewer Pro
Santesoft LTD · v14.2.7
28
open
SQLite
SQLite · v3.53.2
28
open
OpenSC smartcard framework
OpenSC Project · v0.26.1
28
open
Salt Minion
SaltStack, Inc · v3008.1
28
open
Sante DICOM Viewer Lite
Santesoft LTD · v5.0.9
28
open
OpenSC smartcard framework Light
OpenSC Project · v0.26.1
28
open
Nextcloud
Nextcloud GmbH · v33.0.5
27
open
Claude Code
Anthropic PBC · v2.1.185
26
open
SketchUp Viewer
Trimble, Inc. · v22.0.316
26
open
opencode
SST · v1.17.9
26
open