winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/6/2026, 12:39:07 AM.

Daily Prayer Timer
Abiruzzaman Molla · v2.3.3
5
open
Windows Subsystem for Linux
Microsoft Corp. · v2.7.0
5
open
Druva inSync
Druva Technologies Pte. Ltd. · v7.5.7
5
open
HashiCorp Boundary
HashiCorp · v0.21.3
5
open
Connect Tunnel
SonicWall Inc. · v12.5.0.221
5
open
Teleport
Gravitational, Inc. · v18.7.6
5
open
eSpeak
eSpeak · v1.48.04
5
open
Telegram Desktop
Telegram FZ-LLC · v6.7.8
5
open
D-Link DWA-X1850 Driver
D-Link · v1.05
5
open
Core FTP Server
Core FTP · v2.0.775
5
open
PuTTY
Simon Tatham · v0.83.0.0
5
open
MicroDicom Shell Extension
MicroDicom · v5.0.0
5
open
PrusaSlicer
Prusa Research · v2.9.4
5
open
万兴喵影
Wondershare Software · v15.4.2.18996
5
open
Sante DICOM Editor
Santesoft LTD · v10.2.7
5
open
Policy
OpenPolicyContainer · v0.3.6
5
open
PuTTY CAC
Simon Tatham · v0.83.0.1
5
open
Mailpit
Ralph Slooten · v1.29.5
5
open
MicroDicom DICOM Viewer
MicroDicom · v2026.1
5
open
360 File Guard
360 Security Center · v1.0.0.1202
5
open
osslsigncode
Michał Trojnara · v2.13
5
open
ADConnector
Druva Technologies Pte. Ltd. · v1.0.0.0
5
open
FreifunkMeet
Freifunk Muenchen · v2026.1.1
5
open
materialgram
kukuruzka165 · v6.7.7.1
5
open