winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/7/2026, 12:42:08 AM.

PEAK-Drivers
PEAK-System Technik GmbH · v5.1.1.1116
1
open
MoveFile
Sysinternals · v1.02
1
open
XmlNotepad
Chris Lovett · v2.9.0.21
1
open
Roon
Roon Labs LLC · v2.54.1554
1
open
Remote Desktop Connection Manager
Sysinternals · v3.12
1
open
InfluxDB OSS
InfluxData Inc. · v2.7.12
1
open
GnuWin32: Gzip
GnuWin32 · v1.3.12-1
1
open
BGInfo
Sysinternals · v4.33
1
open
Plain Craft Launcher Community Edition
PCLCommunity · v2.13.4
1
open
AVS Audio Converter
Ascensio System SIA · v26.0.2.17
1
open
Nanoleaf Desktop
Nanoleaf · v2.3.5
1
open
Prime95
Mersenne Research, Inc. · v30.19b20
1
open
PendMoves
Sysinternals · v1.3
1
open
Tor Browser
Tor Project · v15.0.11
1
open
influxctl
InfluxData Inc. · v2.11.0
1
open
Microsoft Visual Studio 2010 Tools for Office Runtime
Microsoft Corporation · v10.0.60917
1
open
Sumo Logic OpenTelemetry Collector (FIPS)
Sumo Logic · v0.151.0.2964
1
open
Wondershare PDFelement
Wondershare Software Co.,Ltd. · v7.6.10.5064
1
open
Kate
KDE e.V. · v26.401.11597.0
1
open
Unity 2020 (CN Version)
Unity Technologies ApS · v2020.3.49f1c1
1
open
Mullvad VPN loader
Mullvad VPN · v1.2.0
1
open
Popcorn-Time-Ru
Popcorn Time · v0.4.9
1
open
Nullsoft Install System
Nullsoft and Contributors · v3.12
1
open
Sublime Text 3
SublimeHQ · v3211
1
open