winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/6/2026, 12:41:51 PM.

Miniconda3
Anaconda, Inc. · vpy313_26.3.2-2
2
open
IBM Semeru Runtime Open Edition (JDK)
Semeru · v21.0.10.7
2
open
Godot Engine
Godot Engine · v4.6.2
2
open
minder
stacklok · v0.0.77
2
open
Beats winlogbeat
Elastic · v9.4.0
2
open
NoMachine Enterprise Cloud Server Cluster
NoMachine S.a.r.l. · v9.4.14
2
open
Soda PDF Desktop 15
Avanquest Software (7270356 Canada Inc) · v15.0.10.24664
2
open
Angry IP Scanner
Angry IP Scanner · v3.9.3
2
open
SoftMaker Office 2021
SoftMaker Software GmbH · v21.0.5344
2
open
Windows Software Development Kit
Microsoft Corporation · v10.0.20348.1
2
open
NoMachine Small Business Cloud Server
NoMachine S.a.r.l. · v8.16.1
2
open
Black
Python Software Foundation · v25.1.0
2
open
Listary
Bopsoft · v6.3
2
open
Beats metricbeat
Elastic · v9.4.0
2
open
RVTools
Dell · v4.7.1
2
open
DisplayWidget Center
ASUS · v1.3.1
2
open
360企业安全浏览器
360安全中心 · v13.3.4010.746
2
open
Battle.net Setup
Blizzard Entertainment · v1.19.0.3190
2
open
Image Resizer for Windows
Brice Lambson · v3.1.2
2
open
PDQ Deploy
PDQ.com · v20.0.5.0
2
open
Altova MobileTogether Designer 10.0
Altova · v10.3.0.2
2
open
Lens
Mirantis, Inc. · v2026.4.151333-latest
2
open
IBM Semeru Runtime Open Edition (JRE) 26
Semeru · v26.0.0.35
2
open
GGPKG Viewer
Garden Gnome Software · v1.6.1
2
open