winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/7/2026, 12:12:21 AM.

flatbuffers
Google, Inc. · v25.12.19
1
open
Mihomo (GOAMD64=v2)
MetaCubeX · v1.19.24
1
open
gImageReader
Sandro Mani · v3.4.3
1
open
AXIS IP Utility
Axis Communications · v5.3.1.0
1
open
TKeyVerification
Tillitis · v1.0.0
1
open
JetBrains MPS
JetBrains · v2025.3
1
open
Concourse Fly
Concourse · v8.1.1
1
open
Sublime Text 3
Sublime HQ Pty Ltd · v3.2.2
1
open
Microsoft Web Deploy
Microsoft Corporation · v10.0.2001
1
open
Wondershare PDFelement
Wondershare · v10.4.10
1
open
Eclipse IDE for Enterprise Java and Web Developers
Eclipse.org Foundation, Inc. · v2026-03
1
open
Kangaroo MySQL
Taozuhong · v9.4.1.505
1
open
MoveFile
Sysinternals · v1.02
1
open
Astral
kevin · v2.7.8
1
open
DiskSavvy Ultimate
Flexense Computing Systems Ltd. · v17.3.14
1
open
GnuWin32: DiffUtils
GnuWin32 · v2.8.7-1
1
open
Remote Desktop Connection Manager
Sysinternals · v3.12
1
open
PendMoves
Sysinternals · v1.3
1
open
BaiduPCS-Go
qjfoidnh · v4.0.1
1
open
XmlNotepad
Chris Lovett · v2.9.0.21
1
open
Nullsoft Install System
Nullsoft and Contributors · v3.12
1
open
Kate
KDE e.V. · v26.401.11597.0
1
open
Windows Service Wrapper
CloudBees, Inc. · v2.12.0.0
1
open
Safe Exam Browser
ETH Zürich · v3.10.1
1
open