winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/7/2026, 12:42:08 AM.

Azure Data Studio
Microsoft Corporation · v1.52.0
1
open
Enpass
Enpass Technologies Inc. · v6.11.21.2311
1
open
sbt
Lightbend, Inc. · v1.12.11
1
open
Wise Care 365
WiseCleaner.com · v7.2.8
1
open
Payhere Seller
payhere inc. · v3.1.1
1
open
SQL Server Integration Services Projects
Microsoft Corporation · v17.0.1010.2
1
open
Puppet Bolt
Puppet, Inc. · v3.27.1
1
open
小黑盒加速器
Qingfeng · v1.1.87
1
open
Cilium CLI
Cilium · v0.19.2
1
open
Plain Craft Launcher Community Beta Edition
PCLCommunity · v2.13.0-beta.1
1
open
DevHub
Bruno Lemos · v0.102.0
1
open
Half-Life Asset Manager
Sam Vanheer · v3.0.0
1
open
Deskfiler
Ilya Lopukhin · v1.2.3
1
open
InfluxDB CLI
InfluxData Inc. · v2.7.5
1
open
Mullvad VPN
Mullvad VPN · v2026.1
1
open
Whois
Sysinternals · v1.21
1
open
Logi Options+
Logitech · v2.3.879545
1
open
Patch
GnuWin32 · v2.5.9-7
1
open
Mimecast for Outlook
Mimecast Ltd · v7.10.1.133
1
open
iTop Screen Recorder
iTop Inc. · v6.5.0.3613
1
open
Dapr CLI
Dapr · v1.17.1
1
open
WiX Toolset Command-Line Tools
WiX Toolset · v7.0.0.0
1
open
Parsec Virtual USB Adapter Driver
Parsec Cloud Inc. · v0.3.10.0
1
open
HP Client Management Script Library
HP Development Company, L.P. · v1.8.6
1
open