winget packages with open CVEs
2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/6/2026, 12:39:07 AM.
Microsoft SQL Server Management Studio 22 Preview
Microsoft Corporation · v22.0.0
2
open
Syft
Anchore Inc · v1.44.0
2
open
Bot Framework Emulator
Microsoft Corporation · v4.15.1
2
open
Meta Quest Remote Desktop
Facebook · v86.0.3.105
2
open
Todoist
Doist · v9.27.1
2
open
Beyond Compare 4
Scooter Software · v4.4.7.28397
2
open
Spice webdavd
The Spice Project · v2.4.0
2
open
APM – Agent Package Manager
Microsoft Corporation · v0.12.2
2
open
Bandizip
Bandisoft.com · v7.43
2
open
App Installer
Microsoft Corporation · v1.27.470.0
2
open
SoftMaker FreeOffice 2021
SoftMaker Software GmbH · v1.0.5340
2
open
TIM
腾讯科技(深圳)有限公司 · v3.4.8.22121
2
open
TrueConf
TrueConf · v8.5.2
2
open
Google Earth Pro
Google · v7.3.7.1155
2
open
Windows App Development CLI
Microsoft Corporation · v0.3.1
2
open
微信开发者工具
腾讯科技(广州)有限公司 · v2.01.2510290
2
open
WatchGuard Mobile VPN with SSL client
WatchGuard · v2026.2
2
open
Beyond Compare 5
Scooter Software · v5.2.1.32035
2
open
Focalboard
Mattermost · v7.11.3
2
open
Account Lockout Status
Microsoft Corporation · v1.0.0.60
2
open
IBM Semeru Runtime Open Edition (JRE) 24
Semeru · v24.0.2.12
2
open
IBM Semeru Runtime Open Edition (JRE) 17
Semeru · v17.0.18.8
2
open
AppInstaller File Builder
Microsoft · v1.2020.221.0
2
open
syncthingctl
Martchus · v2.0.10
2
open