winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 6/21/2026, 12:43:55 PM.

Synology Evidence Integrity Authenticator
Synology Inc. · v1.2.3-025
23
open
NATS Server
NATS Authors · v2.10.25
23
open
SynologyCameraTool
Synology · v1.0.0-29
23
open
Acronis Cyber Protect Home Office
Acronis · v28.3.1.41126
22
open
MySQL Workbench 8.0 CE
Oracle Corporation · v8.0.47
22
open
7-Zip
Igor Pavlov · v26.01
21
open
Ollama (Portable)
Ollama · v0.20.2
21
open
Git
The Git Development Community · v2.54.0
21
open
Microsoft .NET Runtime 8.0
Microsoft Corporation · v8.0.28
21
open
Ollama
Ollama · v0.30.9
21
open
Unbound
NLnet Labs · v1.25.1
21
open
ONLYOFFICE Desktop Editors
Ascensio System SIA · v9.4.0
21
open
Git
The Git Development Community · v2.52.0-rc2
21
open
mutool
Artifex Software · v1.23.0
21
open
7-Zip ZS
Igor Pavlov, Tino Reichardt, Sergey Brester · v25.01 ZS v1.5.7 R4
21
open
Microsoft .NET Runtime 9.0
Microsoft Corporation · v9.0.17
21
open
Bitcoin Core
Bitcoin Core project · v31.0
21
open
Microsoft .NET Core Runtime - 2.1.30 (x64)
Microsoft Corporation · v2.1.30.30411
21
open
Microsoft .NET Core SDK 2.2.402 (x64)
Microsoft Corporation · v2.2.402
21
open
Entity Framework Core .NET Command-line Tools
Microsoft Corporation · v10.0.7
21
open
Microsoft .NET Runtime 3.1
Microsoft Corporation · v3.1.32
21
open
MinIO Client
MinIO · v2025.08.13
21
open
Microsoft .NET Runtime 2.2
Microsoft Corporation · v2.2.8.28209
21
open
Microsoft .NET Runtime 11.0 Preview
Microsoft Corporation · v11.0.0-preview.5.26302.115
21
open