winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/5/2026, 6:50:33 AM.

Microsoft .NET Core Runtime - 2.1.30 (x64)
Microsoft Corporation · v2.1.30.30411
21
open
Microsoft .NET Runtime 2.2
Microsoft Corporation · v2.2.8.28209
21
open
ESP-IDF Installation Manager CLI
Espressif Systems · v0.12.0
21
open
Microsoft .NET Runtime 11.0 Preview
Microsoft Corporation · v11.0.0-preview.3.26207.106
21
open
Microsoft .NET SDK 3.1
Microsoft Corporation · v3.1.426
21
open
Git for Windows SDK
The Git Development Community · v1.0.8
21
open
Microsoft .NET Runtime 3.1
Microsoft Corporation · v3.1.32
21
open
Microsoft .NET Runtime 8.0
Microsoft Corporation · v8.0.26
21
open
Microsoft .NET Core SDK 2.2.402 (x64)
Microsoft Corporation · v2.2.402
21
open
Entity Framework Core .NET Command-line Tools
Microsoft Corporation · v10.0.7
21
open
Ethereum - Geth - Official Go implementation of the Ethereum protocol
Ethereum · v1.17.2
20
open
OpenOffice
Apache Software Foundation · v4.116.9816
20
open
Ollama (Portable)
Ollama · v0.20.2
20
open
Monica
Beijing Butterfly Effect Technology Co., Ltd. · v2.9.3
20
open
Ollama
Ollama · v0.23.0
20
open
Azul Zulu JDK 20
Azul Systems, Inc. · v20.32.11
19
open
Azul Zulu JDK 6
Azul Systems, Inc. · v6.22.0.3
19
open
Azul Zulu JRE 11
Azul Systems, Inc. · v11.88.17
19
open
Azul Zulu JRE 12
Azul Systems, Inc. · v12.1.3
19
open
Azul Zulu JRE 25
Azul Systems, Inc. · v25.34.17
19
open
Kangaroo MariaDB
Taozuhong · v9.3.1.401
19
open
Azul Zulu JRE 8
Azul Systems, Inc. · v8.94.0.17
19
open
Azul Zulu JDK 12
Azul Systems, Inc. · v12.3.11
19
open
Azul Zulu JRE 15
Azul Systems, Inc. · v15.46.17
19
open