winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/5/2026, 6:34:35 PM.

WinRAR
win.rar GmbH · v7.22.0
10
open
VLC media player
VideoLAN · v3.0.23
10
open
Nessus Agent
Tenable, Inc. · v11.1.3.20025
10
open
Hoppscotch
hoppscotch · v26.3.1-0
10
open
Unbound
NLnet Labs · v1.25.0
10
open
Sunshine
LizardByte · v2025.924.154138
10
open
VLC media player
VideoLAN · v4.0.0.0-nightly20260304
10
open
SketchUp 2025
Trimble, Inc. · v25.0.660
9
open
Incus
LinuxContainers · v7.0.0
9
open
Dell Command | Update
Dell Inc. · v5.7.0
9
open
SketchUp 2026
Trimble, Inc. · v26.1.256
9
open
Nethack
Nethack DevTeam · v3.6.7
9
open
Microsoft Azure Arc Setup
Microsoft · v2
9
open
SketchUp 2023
Trimble, Inc. · v23.1.340
9
open
Nim programming language
nim · v2.0.8
9
open
JetBrains Toolbox
JetBrains · v3.4.3.0
9
open
lychee
lycheeverse · v0.23.0
9
open
Plex Media Server
Plex, Inc. · v1.43.1.10611
9
open
Azure Monitor Agent
Microsoft Corporation · v1.41.0.0
9
open
SketchUp Pro 2022
Trimble, Inc. · v22.0.354
9
open
WPS Office
Kingsoft Corp. · v12.2.0.23196
9
open
Azure Connected Machine Agent
Microsoft Corporation · v1.63.03384.2896
9
open
Zoom VDI Universal Plugin
Zoom Video Communications, Inc. · v6.6.26970
9
open
Dell Command | Update for Windows Universal
Dell Inc. · v5.7.0
9
open