winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/7/2026, 7:04:14 AM.

Mihomo (GOAMD64=v1)
MetaCubeX · v1.19.24
1
open
Notepad3
Rizonesoft · v7.26.426.1
1
open
Rancher Desktop
SUSE · v1.22.2
1
open
Trading Paints
Rhinode LLC · v2.0.37
1
open
Pexip
Pexip AS · v2.1.1114.0
1
open
Ledger Live
Ledger Live Team · v4.2.0
1
open
OpenDeck
nekename · v2.9.1
1
open
QNAP NetBak Replicator
QNAP Systems, Inc. · v4.5.17.1031
1
open
vhs
charmbracelet · v0.11.0
1
open
Deluge BitTorrent Client Beta
Deluge Team · v2.0b1
1
open
Code::Blocks
The Code::Blocks Team · v25.03
1
open
iTop Screenshot
iTop Inc. · v1.2.3.544
1
open
autotitle
mydehq · v1.2.1
1
open
ZoomIt
Sysinternals · v11.00
1
open
Royal Server
Royal Apps GmbH · v5.02.50419.0
1
open
NI System Configuration
National Instruments Corporation · v26.3.0
1
open
Arq
Haystack Software LLC · v7.40.1.0
1
open
Music Center for PC
Sony Corporation · v2.7.1.04161
1
open
Racket
Racket · v9.1
1
open
Tuanjie Hub
优三缔科技（上海）有限公司 · v1.4.1
1
open
minisat
PolarGoose / niklasso · v2.2
1
open
OpenCC
BYVoid · v1.3.0
1
open
Singular Recast
Singular · v2.1.0
1
open
Another Redis Desktop Manager
Another · v1.7.1
1
open