winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/7/2026, 12:42:08 AM.

QQ
Tencent · v9.9.30.48517
1
open
GNU Arm Embedded Toolchain
ARM Holdings · v14.2.Rel1
1
open
JetBrains MPS (EAP)
JetBrains · vMPS-253.28294.372
1
open
Unity 6000
Unity Technologies ApS · v6000.4.5f1
1
open
Mullvad VPN
Mullvad VPN · v2025.13
1
open
QQ Music
腾讯科技（深圳）有限公司 · v22.22
1
open
tiddlywiki-app
oeyoews · v4.8.2
1
open
DupScout Pro
Flexense Computing Systems Ltd. · v17.3.12
1
open
Microsoft Build Tools 2015
Microsoft Corporation · v14.0.23107.10
1
open
Zabbix Agent 2
Zabbix LLC · v7.4.8
1
open
Synology Note Station Client
Synology Inc. · v2.2.5-804
1
open
Oxygen XML Editor
SyncRO Soft · v28.1
1
open
Desktops
Sysinternals · v2.01
1
open
Safe Exam Browser
ETH Zürich · v3.10.1
1
open
Connection Quality Monitor
SoftPerfect Pty Ltd · v1.1
1
open
Popcorn-Time
Popcorn Time · v0.0.153-129
1
open
Dangerzone
Freedom of the Press Foundation · v0.10.0
1
open
Corsair iCUE5 Software
Corsair · v5.44.55
1
open
腾讯文档
腾讯科技(深圳)有限公司 · v3.10.26
1
open
Snyk
Snyk · v1.1304.0
1
open
Process Monitor
Sysinternals · v4.01
1
open
Hex Workshop
BreakPoint Software · v6.8.0.5419
1
open
Block Load
Carrier · v4.2
1
open
Perfetto
Google · v54.0
1
open