winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/6/2026, 12:39:07 AM.

Kiwi Syslog Server Free
SolarWinds · v9.8.3
5
open
eSpeak NG
eSpeak Community · v1.52.0
5
open
Beats packetbeat
Elastic · v9.4.0
5
open
Barrier
Debauchee Open Source Group · v2.4.0
5
open
WSLtty
Mintty contributors · v3.8.0.3
5
open
Core FTP Pro
CoreFTP · v2.2.1960
5
open
Workspace ONE Assist
Omnissa, LLC. · v25.11.1.3761
5
open
Mini SFTP Server
Core FTP · v2.36
5
open
HiCOS Client
Chunghwa Telecom Corp., Ltd. · v3.1.0
5
open
Wondershare Filmora
Wondershare Software · v15.4.2.18995
5
open
IBM Aspera Connect
IBM · v4.2.15.870
5
open
Forkgram
Forkgram · v6.7.8
5
open
DeepChat
ThinkInAIXYZ · v1.0.3
5
open
64Gram Desktop
64Gram · v1.2.1
5
open
UltraVNC
uvnc bvba · v1.6.4.0
5
open
Wondershare FilmoraPro
Wondershare · v2.6.11519.63305
5
open
Webroot SecureAnywhere
Webroot · v9.0.42.38
5
open
PrusaSlicer Alpha
Prusa Research · v2.6.0-rc2
5
open
AyuGram Desktop
Radolyn Labs · v6.7.8
5
open
Open Policy Agent
Open Policy Agent · v1.7.1
5
open
Nitro PDF Pro (NLS Version)
Nitro · v14.43.6.0
4
open
Microsoft SQL Server 2025 Express
Microsoft Corporation · v17.0.1000.7
4
open
Microsoft Azure CLI
Microsoft Corporation · v2.86.0
4
open
Xbox Game Package Manager
Microsoft Corporation · v3.1.7
4
open