winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/6/2026, 12:39:07 AM.

PDF-XChange PRO
Tracker Software Products (Canada) Ltd. · v10.8.5.410
4
open
Microsoft SQL Server 2025 Developer
Microsoft Corporation · v17.0.1000.7
4
open
DooTask
KuaiFan · v1.7.29
4
open
Crestron AirMedia
Crestron Electronics, Inc. · v5.11.1.164
4
open
PhpStorm (EAP)
JetBrains s.r.o. · v261.24374.36
4
open
PhpStorm
JetBrains s.r.o. · v2026.1.1
4
open
Remote Iteration Client
Microsoft Corporation · v0.0.10-preview
4
open
VX Search Enterprise
Flexense Computing Systems Ltd. · v17.4.16
4
open
Duo Authentication for Windows Logon
Duo Security Inc. · v5.3.0.2497
4
open
Lenovo System Update
Lenovo · v5.08.03.59
4
open
Nitro PDF Pro
Nitro · v14.43.6.0
4
open
XAMPP 8.2
Apache Friends · v8.2.12-0
4
open
Ubiquiti UniFi Network Server
Ubiquiti Inc. · v10.3.58
4
open
Greenshot Preview
Greenshot · v1.3.277
4
open
Greenshot
Greenshot · v1.3.315
4
open
Clash Nyanpasu
keiko233 · v1.6.1
4
open
NVIDIA GeForce NOW
NVIDIA Corporation · v2.0.84.124
4
open
KNIME Analytics Platform
KNIME AG · v5.8.3
4
open
VX Search
Flexense Computing Systems Ltd. · v17.4.16
4
open
VX Search Pro
Flexense Computing Systems Ltd. · v17.4.16
4
open
RubyMine
JetBrains s.r.o. · v2026.1.1
4
open
Bazarr
Morpheus · v1.17
4
open
Touch Adaptation Kit Command Line Tool (TAK CLI)
Microsoft Corporation · v11.36.0
4
open
ticker
achannarasappa · v5.2.0
4
open