winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/5/2026, 12:29:47 PM.

Jira Service Management Long Term Support
Atlassian · v10.3.17
15
open
Rustup: the Rust toolchain installer
The Rust Programming Language · v1.29.0
15
open
Intel® oneAPI HPC Toolkit
Intel Corporation · v2025.1.3.7
15
open
calibre portable
calibre-ebook.com · v8.12.0.0
15
open
nginx
freenginx · v1.29.7
15
open
nginx
nginx · v1.29.8
15
open
Xibo Player
Xibo Signage Ltd · v4.406.3
15
open
Microsoft Teams
Microsoft Corporation · v26093.415.4620.1935
14
open
Microsoft Teams
Microsoft Corporation · v26093.306.4583.538
14
open
Microsoft Teams classic
Microsoft Corporation · v1.8.00.27654
14
open
Adobe DNG Converter
Adobe Systems, Inc. · v18.3
14
open
Microsoft Teams TxNDI add-on
Microsoft · v2024.8.1.14
14
open
llama.cpp
ggml · vb9026
14
open
HP Support Assistant
HP Inc. · v9.47.41.0
14
open
Harbor
harbor · v0.4.14
14
open
IObit Malware Fighter
IObit · v13.2.0.1635
14
open
Adobe Creative Cloud
Adobe Inc. · v6.9.1.1
14
open
Harbor CLI
Harbor · v0.0.8
14
open
Sped Fiscal ICMS IPI
Receita Federal do Brasil · v6.0.3
14
open
7-Zip
Igor Pavlov · v26.01
13
open
Docker Desktop Edge
Docker Inc. · v2.5.4.50534
13
open
Ruby 3.4 with MSYS2
RubyInstaller Team · v3.4.9-1
13
open
Ruby 2.6 with MSYS2
RubyInstaller Team · v2.6.10-1
13
open
Ruby 3.4
RubyInstaller Team · v3.4.9-1
13
open