winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/6/2026, 12:39:07 AM.

RingCentralRooms
Zoom Video Communications, Inc. and RingCentral Inc. · v24.3.10.462
4
open
Actual Budget
Actual Budget · v26.5.0
4
open
KNIME Analytics Platform
KNIME AG · v5.9.0
4
open
GoLand
JetBrains s.r.o. · v2026.1.1
4
open
Helix Core Apps
Perforce Software, Inc. · v242.61.1
4
open
Dell Peripheral Manager
Dell Inc. · v1.7.7
4
open
XAMPP 8.1
Apache Friends · v8.1.25-0
4
open
Cap’n Proto
Cap’n Proto · v1.1.0
4
open
HackDesk
Michael Wang · v0.0.7
4
open
Tar
GnuWin32 · v1.13-1
4
open
NxFilter
Jahastech · v4.7.1.7
4
open
FlyClash
GtxFury · v0.2.7
4
open
MongoDB Compass Isolated Edition
MongoDB Inc · v1.49.5.0
4
open
GoLand (EAP)
JetBrains s.r.o. · v261.22158.120
4
open
BeeDrive
Synology · v2.0.2-20210
4
open
Clash Verge
Clash Verge Rev · v2.4.7
4
open
Rust (GNU LLVM)
The Rust Project Developers · v1.95.0
4
open
sens
junapur · v2.3.0
4
open
MongoDB Compass Community
MongoDB · v1.41.0
4
open
Mozilla VPN
Mozilla Corporation · v2.36.0
4
open
Helix Visual Merge Tool (P4Merge)
Perforce Software, Inc. · v214.226.4565
4
open
RubyMine (EAP)
JetBrains s.r.o. · v261.24374.27
4
open
Zoom Outlook Plugin
Zoom · v6.6.10
3
open
Power Automate for desktop
Microsoft Corporation · v2.67.00143.26090
3
open