winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/7/2026, 7:04:14 AM.

Poly Lens
Poly, Inc. · v2.3.1.4673
1
open
SDelete
Sysinternals · v2.06
1
open
sing-box
SagerNet · v1.13.11
1
open
Bitvise SSH Client
Bitvise Limited · v9.61
1
open
Harmony SASE
Check Point Software Technologies Ltd · v12.8.0.14443
1
open
InfluxDB 3 Core
InfluxData Inc. · v3.5.0
1
open
Unity 2022
Unity Technologies ApS · v2022.3.62f3
1
open
Notepad3
Rizonesoft · v7.26.426.1
1
open
v2ray-core
v2fly · v5.48.0
1
open
RiseupVPN
LEAP Encryption Access Project · v0.24.8
1
open
goreleaser
goreleaser · v2.15.4
1
open
Dashy
futureglobe · v1.0.0
1
open
Quick Share from Google
Google LLC · v1.0.2555.1
1
open
Azure Data Studio
Microsoft Corporation · v1.52.0
1
open
sbt
Lightbend, Inc. · v1.12.11
1
open
Wise Care 365
WiseCleaner.com · v7.2.8
1
open
SQL Server Integration Services Projects
Microsoft Corporation · v17.0.1010.2
1
open
小黑盒加速器
Qingfeng · v1.1.87
1
open
Enpass
Enpass Technologies Inc. · v6.11.21.2311
1
open
Mihomo (GOAMD64=v1)
MetaCubeX · v1.19.24
1
open
Payhere Seller
payhere inc. · v3.1.1
1
open
Royal TS 5
Royal Apps GmbH · v5.04.60415.0
1
open
Wondershare Creative Center
Wondershare · v1.0.15
1
open
Puppet Bolt
Puppet, Inc. · v3.27.1
1
open