winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/6/2026, 6:37:38 PM.

IBM Semeru Runtime Open Edition (JDK) 25
Semeru · v25.0.2.10
2
open
IBM Semeru Runtime Open Edition (JRE) 20
Semeru · v20.0.2.9
2
open
IBM Semeru Runtime Open Edition (JDK) 22
Semeru · v22.0.2.9
2
open
IBM Semeru Runtime Open Edition (JDK) 16
Semeru · v11.0.23.9
2
open
ownCloud
ownCloud GmbH · v6.0.2.17506
2
open
IBM Semeru Runtime Open Edition (JRE) 22
Semeru · v22.0.2.9
2
open
Beats heartbeat
Elastic · v9.4.0
2
open
Intune WSL Plugin
Microsoft Corporation · v1.25.4.0
2
open
stripe
Stripe, Inc. · v1.40.9
2
open
Windows Software Development Kit - Windows 10.0.26100.4188
Microsoft Corporation · v10.0.26100.7705
2
open
KiCad
KiCad · v10.0.1
2
open
Freedom Scientific JAWS 2024
Freedom Scientific · v2024.2405.48.400
2
open
NoMachine Enterprise Desktop
NoMachine S.a.r.l. · v9.4.14
2
open
NoMachine Cloud Server
NoMachine S.a.r.l. · v9.4.14
2
open
JD-GUI Duo
Nicolas Baumann · v2.0.110
2
open
WinZip
Corel Corporation · v29.0.16416
2
open
KiCad Lite EDA
KiCad · v5.1.9
2
open
IBM Semeru Runtime Open Edition (JRE) 16
Semeru · v11.0.23.9
2
open
Furnace
tildearrow · v0.6.8.3
2
open
4K Tokkit
Open Media LLC · v25.1.0.1020
2
open
TeamViewer QuickSupport
TeamViewer Germany GmbH · v15.76.5
2
open
soko
Emil Celik · v0.18.1
2
open
IBM Semeru Runtime Open Edition (JRE) 23
Semeru · v23.0.2.7
2
open
Beats auditbeat
Elastic · v9.4.0
2
open