winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/6/2026, 12:39:07 AM.

Microsoft Defender for Cloud CLI
Microsoft · v2.0.03334.114
6
open
Autopsy
The Sleuth Kit · v4.22.1
6
open
Stirling-PDF
Stirling-Software · v2.10.0
6
open
croc
schollz · v10.4.2
6
open
Anki
Anki · v25.09
6
open
HDP PC Agent
QNAP Systems, Inc. · v1.4.0
6
open
create-tauri-app
Tauri · v4.5.10
6
open
Bforartists 4
Bforartists · v5.1.0
6
open
Seq
Datalust Pty Ltd · v10.1.16202.0
6
open
Windows Subsystem for Linux
Microsoft Corp. · v2.6.3
5
open
Azure Functions Core Tools
Microsoft · v4.10.0
5
open
Janet
JanetLang · v1.41.2
5
open
Telegram Desktop Beta
Telegram FZ-LLC · v4.6.4
5
open
AVR-GCC
Zak Kemble · v14.1.0
5
open
NetCDF
Unidata · v4.10.0
5
open
IBM Aspera
IBM · v1.0.17
5
open
Azure IoT Explorer Preview
Microsoft · v0.15.12
5
open
WebStorm
JetBrains s.r.o. · v2026.1.1
5
open
Global VPN Client
SonicWall · v4.10.8
5
open
LuaJIT
DEVCOM · v2.1.19907
5
open
Vision Teacher for Chromebooks Machine-Wide Installer
Impero Solutions Ltd · v1.7.6.0
5
open
WebStorm (EAP)
JetBrains s.r.o. · v261.24374.30
5
open
Microsoft Purview Information Protection
Microsoft Corporation · v3.2.57.0
5
open
New API
Quantum Nous · v0.13.2
5
open