winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/5/2026, 11:22:46 PM.

Sandboxie-Plus
http://xanasoft.com/ · v1.17.5
7
open
Prisma Access Browser
Palo Alto Networks Inc · v147.28.2.138
7
open
soft-serve
charmbracelet · v0.11.6
7
open
Video Downloader
kayapater · v1.5.0
7
open
Intel(R) PresentMon
Intel(R) Corporation · v2.4.1.0
7
open
JetBrains Rider (EAP)
JetBrains s.r.o. · v261.22158.95
7
open
PyCharm Community Edition (EAP)
JetBrains s.r.o. · v252.23892.194
7
open
MarkText
Jocs · v0.17.1
7
open
Docker CLI
Docker Inc. · v29.4.2
7
open
Cato Client
Cato Networks · v6.2.0.8682
7
open
HalalDL
Asdmir786 · v0.4.1
7
open
Docker Buildx
Docker Inc. · v0.32.1
7
open
Dart SDK - stable channel
Gekorm · v1.6.0
7
open
PyCharm Community Edition
JetBrains s.r.o. · v2025.2.6.1
7
open
ActiveProtect Agent
Synology Inc. · v1.2.0508
7
open
GOG GALAXY
GOG.com · v2.0.98.44
7
open
Microsoft Azure Service Fabric SDK
Microsoft Corporation · v8.3.475
7
open
libjpeg-turbo SDK for GCC
libjpeg-turbo · v3.1.4.1
7
open
JetBrains Rider
JetBrains s.r.o. · v2026.1.1
7
open
Dash by Docker
Docker Inc · v0.20.0
7
open
PyCharm
JetBrains s.r.o. · v2026.1.1
7
open
yt-dlp
yt-dlp · v2026.03.17
7
open
yt-dlp-gui
dsymbol · v2025.09.30
7
open
Splashtop Streamer Deployment (MSI)
Splashtop Inc. · v3.8.2.0
7
open