winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/6/2026, 6:37:38 PM.

MySQL Shell
Oracle and/or its affiliates · v8.4.5
2
open
IBM Semeru Runtime Open Edition (JRE) 11
Semeru · v11.0.30.7
2
open
Wise Force Deleter
WiseCleaner.com · v1.5.7
2
open
KLog
EA4K · v2.5
2
open
WatchGuard Authentication Gateway
WatchGuard · v12.10.2
2
open
TeraCopy
Code Sector · v3.17
2
open
Unified Remote Server
Unified Intents AB · v3.13.0
2
open
Halloy
Squidowl · v2026.6.0
2
open
IBM Semeru Runtime Open Edition (JDK) 23
Semeru · v23.0.2.7
2
open
WinZip Self-Extractor
WinZip Computing, S.L. · v4.0.12218.0
2
open
LilyPond
LilyPond · v2.24.4
2
open
WatchGuard Authentication Client
WatchGuard · v12.7.0
2
open
Synology Presto
Synology, Inc. · v2.1.3.0672
2
open
Windows Software Development Kit - Windows 10.0.17763.132
Microsoft Corporation · v10.0.17763.132
2
open
USB Network Gate
Electronic Team · v11.0.2724
2
open
Yubico PIV Tool
Yubico AB · v2.7.3
2
open
Hyper
ZEIT, Inc. · v3.4.1
2
open
minder
mindersec · v0.1.2
2
open
NAVER MYBOX Explorer
NAVER Corp. · v3.0.6.116
2
open
SoftPerfect RAM Disk
SoftPerfect Pty Ltd · v26.4
2
open
Untis 2025
Untis GmbH · v2025
2
open
IOTransfer
iTop Inc. · v4.3.1.1562
2
open
IBM Semeru Runtime Open Edition (JDK) 19
Semeru · v19.0.2.7
2
open
Plantronics Hub Software
Plantronics, Inc. · v3.25.54307.37251
2
open