winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/5/2026, 6:50:33 AM.

NETGEAR Discovery Tool
NETGEAR · v2.0.7
24
open
PowerShell
Microsoft Corporation · v7.6.1.0
23
open
Microsoft ODBC Driver 17 for SQL Server
Microsoft Corporation · v17.11.1.1
23
open
PaperCut NG
PaperCut Software International Pty Ltd · v21.0.3.57216
23
open
Microsoft SQL Server 2012 Native Client
Microsoft Corporation · v11.4.7001.0
23
open
Microsoft ODBC Driver 11 for SQL Server
Microsoft Corporation · v12.0.5543.11
23
open
Sqlcmd Tools
Microsoft Corporation · v1.9.0
23
open
Microsoft ODBC Driver 18 for SQL Server
Microsoft Corporation · v18.6.2.1
23
open
Microsoft ODBC Driver 13 for SQL Server
Microsoft Corporation · v13.1.4414.46
23
open
PowerShell Preview
Microsoft Corporation · v7.7.1.0
23
open
GoCD Agent
ThoughtWorks, Inc. · v21.2.0-12498
23
open
Intel® oneAPI Base Toolkit
Intel Corporation · v2025.1.3.8
23
open
NATS Server
NATS Authors · v2.10.25
23
open
Microsoft ODBC Driver 11 for SQL Server
Microsoft Corporation · v12.2.5543.11
23
open
Acronis Cyber Protect Home Office
Acronis · v28.3.1.41126
22
open
MySQL Workbench 8.0 CE
Oracle Corporation · v8.0.47
22
open
ONLYOFFICE Desktop Editors
Ascensio System SIA · v9.3.1
21
open
mutool
Artifex Software · v1.23.0
21
open
Bitcoin Core
Bitcoin Core project · v31.0
21
open
Git
The Git Development Community · v2.52.0-rc2
21
open
Microsoft .NET Runtime 2.2
Microsoft Corporation · v2.2.8.28209
21
open
Git for Windows SDK
The Git Development Community · v1.0.8
21
open
Microsoft .NET Windows Desktop Runtime 3.1
Microsoft Corporation · v3.1.32
21
open
Microsoft .NET Runtime 8.0
Microsoft Corporation · v8.0.26
21
open