winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/7/2026, 12:42:19 PM.

haus
Kevin Boss · v0.1.2
1
open
DisplayLink Graphics (with Hot Desking)
DisplayLink Corp. · v12.2.2204.0
1
open
SyncBackFree
2BrightSparks · v12.0.8.0
1
open
Remote Desktop Services Infrastructure Agent
Microsoft Corporation · v1.0.13805.500
1
open
ControlUpAgent
ControlUp Technologies Ltd · v9.2.0.711
1
open
Lenovo Thin Installer
Lenovo · v1.04.02.0024
1
open
EpsonNet Config Portable
Seiko Epson Corporation · v4.11.0
1
open
WTFast
AAA Internet Publishing Inc. · v5.5.25.0
1
open
Bitbucket Server
Atlassian · v7.21.23
1
open
AingDesk
bt.cn · v1.2.0
1
open
Azure Cosmos DB Emulator
Microsoft® Corporation · v2.14.27
1
open
Keeper Forcefield
Keeper Security, Inc. · v1.2.0.183
1
open
Evope
Evope, Co. · v1.1.7.28
1
open
Kate
KDE e.V. · v26.04.1
1
open
FlexiHub
Electronic Team, Inc. · v7.0.15463
1
open
Fabric
danielmiessler · v1.4.452
1
open
Miniforge3
conda-forge · v26.3.2-0
1
open
Wondershare HiPDF
Wondershare · v1.0.3
1
open
EMCO Remote Shutdown 7
EMCO Software · v7.4.4
1
open
Autologon
Sysinternals · v3.10
1
open
Amazon WorkSpaces
Amazon Web Services, Inc · v5.32.0.5813
1
open
Mihomo
MetaCubeX · v1.19.24
1
open
ControlUp Real-Time Agent (and Manager)
ControlUp Technologies Ltd · v9.2.0.711
1
open
Total Commander
Ghisler Software GmbH · v11.56
1
open