winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/7/2026, 12:42:08 AM.

Eclipse IDE for C/C++ Developers
Eclipse.org Foundation, Inc. · v2026-03
1
open
Logitech Sync
Logitech Europe S.A. · v3.9.322
1
open
Password Importer Standalone
Keeper Security, Inc. · v17.0.2.0
1
open
Electron Cash SLP
Electron Cash LLC · v3.6.6
1
open
Strings
Sysinternals · v2.54
1
open
GTK# for .NET
Mono Project · v2.12.45
1
open
DataGrip
JetBrains s.r.o. · v2026.1.3
1
open
Smart Control
AKKO · v6.27.0
1
open
RustRover
JetBrains s.r.o. · v2026.1.1
1
open
Duo Device Health
Duo Security · v4.4.0.0
1
open
Eclipse IDE for Java Developers
Eclipse.org Foundation, Inc. · v2026-03
1
open
Yana
Lukas Bach · v1.0.16
1
open
RegJump
Sysinternals · v1.11
1
open
Poly Lens
Poly, Inc. · v2.3.1.4673
1
open
InfluxDB 3 Core
InfluxData Inc. · v3.5.0
1
open
SDelete
Sysinternals · v2.06
1
open
Bitvise SSH Client
Bitvise Limited · v9.61
1
open
Harmony SASE
Check Point Software Technologies Ltd · v12.8.0.14443
1
open
Unity 2022
Unity Technologies ApS · v2022.3.62f3
1
open
Quick Share from Google
Google LLC · v1.0.2555.1
1
open
v2ray-core
v2fly · v5.48.0
1
open
goreleaser
goreleaser · v2.15.4
1
open
Dashy
futureglobe · v1.0.0
1
open
RiseupVPN
LEAP Encryption Access Project · v0.24.8
1
open