winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/6/2026, 12:41:51 PM.

Copilot CLI
GitHub, Inc. · vv1.0.41
2
open
WatchGuard Mobile VPN with SSL client
WatchGuard · v2026.2
2
open
IBM Semeru Runtime Open Edition (JRE) 11
Semeru · v11.0.30.7
2
open
Untis 2026
Untis GmbH · v2026
2
open
AtomicParsley
Wez Furlong · v20240608.083822.1ed9031
2
open
Vagrant
HashiCorp · v2.4.9
2
open
Jitsi Meet
Jitsi Team · v2026.4.0
2
open
Object2VR - Garden Gnome Software
Garden Gnome GmbH · v4.0.2
2
open
geckodriver
Mozilla · v0.36.0
2
open
Windows Software Development Kit
Microsoft Corporation · v10.0.22000.832
2
open
step-ca
Smallstep · v0.30.2
2
open
MSI Afterburner Beta
MSI Co., LTD · v4.6.7 Beta 2
2
open
Godot Engine (Mono)
Godot Engine · v4.6.2
2
open
NoMachine Enterprise Cloud Server
NoMachine S.a.r.l. · v9.4.14
2
open
NCPA
Nagios Enterprises, LLC · v3.4.0
2
open
Talk2M Connection Checker
HMS Industrial Networks sa · v3.0.11.45
2
open
IBM Semeru Runtime Open Edition (JDK) 8
Semeru · v8.0.482.8
2
open
SimpMusic
maxrave-dev · v1.1.1
2
open
IBM Semeru Runtime Open Edition (JDK) 20
Semeru · v20.0.2.9
2
open
Altova MobileTogether Server
Altova · v10.2.0.1
2
open
ODA Viewer
ODA · v27.1.0
2
open
Windows Software Development Kit - Windows 10.0.28000.1721
Microsoft Corporation · v10.0.28000.1721
2
open
Sante FFT Imaging
Santesoft LTD · v1.4.4
2
open
Xlight FTP Server
Xlight FTP · v3.9.4.6
2
open