winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/7/2026, 12:42:08 AM.

Block Load
Carrier · v4.2
1
open
Apache Parquet for .NET
aloneguid · v5.1.1
1
open
ProRes RAW for Windows
Apple · v1.3
1
open
Tera Term
TeraTerm Project · v4.108
1
open
Foundry Local
Microsoft Corporation · v0.8.119.102
1
open
Eclipse IDE for RCP and RAP Developers
Eclipse.org Foundation, Inc. · v2026-03
1
open
PC Clone
Huawei Device Co., Ltd. · v14.0.7.220(C233)
1
open
KDE Connect (AppX)
KDE e.V. · v25.1201.5923.0
1
open
Wisenet WAVE Server
Hanwha · v6.0.3.40736
1
open
Ultimaker Cura
UltiMaker · v5.12.1
1
open
Sumo Logic OpenTelemetry Collector
Sumo Logic · v0.151.0.2964
1
open
Sublime Text 4
Sublime HQ Pty Ltd · v4.0.0.420000
1
open
sd - search & displace
Gregory · v1.1.0
1
open
Wassette
Microsoft Corporation · v0.4.0
1
open
SymCrypt
Microsoft · v103.8.0
1
open
Devolutions Gateway
Devolutions · v26.1.2
1
open
DupScout Enterprise
Flexense Computing Systems Ltd. · v17.3.12
1
open
Wondershare Filmii
Wondershare Software · v1.7.3
1
open
Pale Moon
Moonchild Productions · v34.2.2
1
open
Wasmer
Wasmer, Inc. · v7.1.0
1
open
QQ影音
腾讯科技（深圳）有限公司 · v4.6.3.1104
1
open
Maltego
Maltego · v4.9.3
1
open
tftpd64
PJO2 · v4.74
1
open
GraphiQL
Adam Miskiewicz · v0.7.2
1
open