winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 6/21/2026, 12:43:55 PM.

Azul Zulu JDK 17
Azul Systems, Inc. · v17.66.19
19
open
Azul Zulu JDK 25
Azul Systems, Inc. · v25.34.17
19
open
Azul Zulu JDK 8
Azul Systems, Inc. · v8.94.0.17
19
open
Jellyfin2Samsung
Jellyfin2Samsung · v2.3.1.1
19
open
Azul Zulu JRE 8
Azul Systems, Inc. · v8.94.0.17
19
open
jq
jqlang · v1.8.2
19
open
Azul Zulu JDK 7
Azul Systems, Inc. · v7.56.0.11
19
open
Azul Zulu JDK 6
Azul Systems, Inc. · v6.22.0.3
19
open
Azul Zulu JDK 11
Azul Systems, Inc. · v11.88.17
19
open
Azul Zulu JDK 22
Azul Systems, Inc. · v22.32.15
19
open
Azul Zulu JRE 11
Azul Systems, Inc. · v11.88.17
19
open
Azul ZuluFX JDK 17
Azul Systems, Inc. · v17.66.19
19
open
Azul Zulu JDK 20
Azul Systems, Inc. · v20.32.11
19
open
Azul Zulu JDK 14
Azul Systems, Inc. · v14.29.23
19
open
Azul ZuluFX JDK 19
Azul Systems, Inc. · v19.32.15
19
open
Azul Zulu JRE 25
Azul Systems, Inc. · v25.34.17
19
open
Azul Zulu JDK 19
Azul Systems, Inc. · v19.32.13
19
open
Azul Zulu JDK 26
Azul Systems, Inc. · v26.30.11
19
open
Kangaroo MariaDB
Taozuhong · v9.5.1.531
19
open
Azul Zulu JRE 7
Azul Systems, Inc. · v7.56.0.11
19
open
Azul ZuluFX JDK 26
Azul Systems, Inc. · v26.30.11
19
open
Affinity
Canva · v3.2.2.4557
19
open
Azul ZuluFX JDK 22
Azul Systems, Inc. · v22.32.15
19
open
Azul ZuluFX JDK 15
Azul Systems, Inc. · v15.46.17
19
open