winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/5/2026, 12:40:04 AM.

HashiCorp Consul
HashiCorp · v1.22.7
31
open
Hubble
Cilium · v0.12.0
31
open
Microsoft OLE DB Driver for SQL Server
Microsoft Corporation · v19.4.1.0
30
open
JetBrains Hub
JetBrains · v23.1.16990
30
open
Another Qt installer
Hiroshi Miura · v3.3.0
29
open
Qt Designer
Michael Herrmann · v5.11.1
29
open
QtCreator
The Qt Company Ltd · v19.0.0
29
open
Sante DICOM Viewer Pro
Santesoft LTD · v14.2.7
28
open
Sante DICOM Viewer Lite
Santesoft LTD · v5.0.9
28
open
Kubernetes CLI
The Kubernetes Authors · v1.36.0
28
open
Salt Minion
SaltStack, Inc · v3007.14
28
open
LibreOffice SDK
The Document Foundation · v26.2.3.2
27
open
Nextcloud
Nextcloud GmbH · v33.0.3
27
open
LibreOffice Help Pack
The Document Foundation · v26.2.2.2
27
open
coreutils
uutils · v0.8.0
26
open
SketchUp Viewer
Trimble, Inc. · v22.0.316
26
open
SQLite
SQLite · v3.53.0
26
open
OctaCore Utils
Yohanes Oktanio · v1.0.0
26
open
OpenSC smartcard framework
OpenSC Project · v0.26.1
26
open
OpenSC smartcard framework Light
OpenSC Project · v0.26.1
26
open
OpenShift Client
Red Hat Inc. · v4.19.10
25
open
busybox-w32
frippery.org · v1.38.0-FRP-5579-g5749feb35
25
open
Vi
Saki Studio · v1.0.0
25
open
Helm
Helm · v4.1.4
24
open