This release contains a fix for a vulnerability in how vcpkg packaged OpenSSL on Windows: https://github.com/microsoft/vcpkg/pull/50518

The vulnerability was originally reported by TrendAI Zero Day Initiative and assigned ZDI-CAN-29616 (visible at the time of this writing on https://www.zerodayinitiative.com/advisories/upcoming/ ).

If you only want to update OpenSSL you should be able to override the selected version to `3.6.1#3` or later.

The following vcpkg-tool releases have occurred since the last registry release:
* https://github.com/microsoft/vcpkg-tool/releases/tag/2026-03-04

In those tool releases, the following changes are particularly meaningful:
* Fix mismatched VCPKG_ROOT warnings when Visual Studio has vcpkg installed by @BillyONeal in https://github.com/microsoft/vcpkg-tool/pull/1931

<details>
<summary><b>The following 10 ports have been added:</b></summary>

|port|version|
|---|---|
|ddtdanilo-lmdb-wrapper|1.0.1|
|frei0r|2.5.4|
|hesphoros-uniconv|3.3.2|
|libdxfrw|2025-09-25|
|libsharp|1.0.0|
|obfuscxx|1.3.1|
|sdl3-mixer|3.2.0|
|spine-c|4.2.20260227|
|spine-cpp|4.2.20260227|
|stillwater-universal|3.96|
</details>

<details>
<summary><b>The following 321 ports have been updated:</b></summary>

|port|original version|new version|
|---|---|---|
|abseil|20250814.1|20260107.1|
|acl|2.3.2|2.3.2#1|
|activemq-cpp|3.9.5#17|3.9.5#18|
|aeron|1.50.1|1.50.3|
|alsa|1.2.15.3|1.2.15.3#1|
|anyxx|0.5.1|0.6.0|
|atomic-queue|1.7.1|1.7.2|
|attr|2.5.2|2.5.2#1|
|audit|4.1.3|4.1.3#1|
|aws-c-auth|0.9.6|0.10.1|
|aws-c-event-stream|0.5.9|0.6.0|
|aws-c-http|0.10.10|0.10.11|
|aws-c-io|0.26.1|0.26.2|
|aws-c-mqtt|0.14.0|0.15.1|
|aws-crt-cpp|0.37.2|0.37.4|
|aws-sdk-cpp|1.11.740|1.11.769|
|baresip-libre|4.4.0|4.6.0|
|basisu|2.0.2|2.1.0|
|bit7z|4.0.10|4.0.11|
|blosc2|2.23.0|2.23.1|
|braft|2021-26-04#6|2021-26-04#7|
|brpc|1.15.0#1|1.16.0|
|c4core|0.2.8|0.2.10|
|cachelib|2025.05.19.00|2026.02.23.00|
|capnproto|1.3.0|1.4.0|
|ccfits|2.5#13|2.7|
|cddlib|0.94n|0.94n#1|
|cfitsio|3.49#6|4.6.3|
|charls|2.4.2|2.4.3|
|cnats|3.12.0|3.12.0#2|
|coin-or-cgl|2023-02-01|2023-02-01#1|
|coin-or-clp|2023-02-01|2023-02-01#1|
|coin-or-osi|2024-04-16|2024-04-16#1|
|coinutils|2024-04-08|2024-04-08#1|
|cpp-httplib|0.33.1|0.38.0|
|cpp-peglib|1.9.1|1.10.0|
|cppunit|1.15.1#4|1.15.1#5|
|cppvrf|1.1.0|1.6.0|
|cryptopp|2025-12-01|2026-03-02|
|curl|8.18.0#1|8.19.0|
|cyrus-sasl|2.1.28#3|2.1.28#4|
|dartsim|6.15.0#6|6.15.0#7|
|dataframe|3.7.0|4.0.0|
|dawn|20251202.213730#2|20260219.200501|
|dbus|1.16.2#2|1.16.2#3|
|detours|4.0.1#8|2025-06-20|
|directx-headers|1.619.0|1.619.1|
|directx12-agility|1.619.0|1.619.1|
|directxmath|2025-04-03|2026-03-12|
|drlibs|2026-01-16|2026-03-03|
|elfutils|0.193|0.193#1|
|etl|20.45.0|20.46.2|
|exiv2|0.28.7#1|0.28.8|
|faiss|1.13.2|1.14.1|
|farmhash|1.1#6|1.1#7|
|fast-float|8.2.3|8.2.4|
|fastcgi|2.4.7|2.4.7#1|
|faudio|26.2|26.3|
|fbthrift|2025.05.19.00|2026.02.23.00|
|fizz|2025.05.19.00|2026.02.23.00|
|fkyaml|0.4.2|0.4.2#1|
|flecs|4.1.4|4.1.5|
|flint|2.9.0#1|3.4.0|
|folly|2025.05.19.00|2026.02.23.00|
|font-util|1.4.1|1.4.1#1|
|fontconfig|2.17.1#1|2.17.1#2|
|freerdp|3.22.0|3.24.0|
|freexl|2.0.0#1|2.0.0#2|
|gdal|3.12.2|3.12.2#1|
|gdcm|3.0.24|3.2.2|
|glaze|6.5.1|7.2.1|
|gmsh|4.15.0|4.15.1|
|gperftools|2.18|2.18.1|
|grpc|1.76.0|1.76.0#1|
|gsl-lite|1.0.1|1.1.0|
|gtk|4.16.3#4|4.22.0|
|gtkmm|4.14.0|4.22.0|
|h3|4.4.1|4.4.1#1|
|half|2.2.1|2.2.1#1|
|harfbuzz|12.3.2|13.0.1|
|hashids|1.2.2|1.2.2#1|
|hdf5|2.0.0|2.0.0#1|
|healpix|1.12.10#9|3.83|
|hello-imgui|1.6.0#3|1.92.5|
|htscodecs|1.6.5|1.6.6#1|
|huira|0.8.2|0.9.1|
|imgui|1.91.9|1.92.6|
|imgui-node-editor|0.9.3#2|0.9.3#3|
|imgui-sfml|3.0#2|3.0#3|
|imguizmo|2024-05-29#1|2024-05-29#2|
|jasper|4.2.8|4.2.9|
|jwsung91-unilink|0.4.0|0.4.3|
|jwt-cpp|0.7.1|0.7.2|
|krb5|1.22.2|1.22.2#1|
|lely-core|2.3.5|2.3.5#1|
|lexbor|2.6.0|2.7.0|
|libadwaita|1.3.2#3|1.8.4|
|libao|1.2.2#5|1.2.2#6|
|libarchive|3.8.5|3.8.6|
|libavif|1.3.0#1|1.4.0|
|libbacktrace|2024-11-30|2024-11-30#1|
|libbluray|1.4.0|1.4.1|
|libbson|2.2.2|2.2.3|
|libcgroup|3.2.0|3.2.0#1|
|libconfuse|3.3|3.3#1|
|libcsv|3.0.3#1|3.0.3#2|
|libdjinterop|0.27.0#1|0.27.1|
|libdmx|1.1.5|1.1.5#1|
|libdvdnav|6.1.1|6.1.1#1|
|libdwarf|2.3.0|2.3.1|
|libedit|2024-08-08|2024-08-08#1|
|liberasurecode|1.7.1|1.7.1#1|
|libev|4.33#4|4.33#5|
|libexif|0.6.25|0.6.25#1|
|libfabric|1.22.0|1.22.0#1|
|libfontenc|1.1.4|1.1.4#1|
|libfs|1.0.9|1.0.10#1|
|libgcrypt|1.12.0|1.12.1|
|libgnutls|3.8.11|3.8.12|
|libgossip|1.2.1.2|1.2.1.3|
|libgpg-error|1.58|1.59|
|libgpiod|2.1.3|2.1.3#1|
|libice|1.1.2#1|1.1.2#2|
|libmaxminddb|1.13.2|1.13.3|
|libmodbus|3.1.11|3.1.12|
|libmount|2.41.3|2.41.3#1|
|libmtp|1.1.22|1.1.22#1|
|libopensp|1.5.2#4|1.5.2#5|
|libosip2|5.3.1#2|5.3.1#3|
|libphonenumber|9.0.25|9.0.26|
|librtpi|1.0.1|1.0.1#1|
|librttopo|1.1.0#9|1.1.0#10|
|libsass|3.6.6|3.6.6#1|
|libscran-umappp|3.2.0|3.2.1|
|libsecret|0.21.4#2|0.21.7|
|libsm|1.2.6|1.2.6#1|
|libsodium|1.0.21|1.0.21#1|
|libsoup|3.6.5#1|3.6.6|
|libspnav|0.2.3#2|0.2.3#3|
|libsrtp|2.7.0#1|2.8.0|
|libtasn1|4.19.0#2|4.19.0#3|
|libu2f-server|1.1.0#5|1.1.0#6|
|libunwind|1.8.3|1.8.3#1|
|libupnp|1.14.25|1.18.2|
|libuv|1.52.0|1.52.1|
|libva|2.20.0|2.23.0|
|libvhdi|20231127|20251119|
|libwandio|4.2.6-1|4.2.6-1#1|
|libwebsockets|4.5.2|4.5.7|
|libx11|1.8.1#4|1.8.1#5|
|libxau|1.0.12|1.0.12#1|
|libxaw|1.0.13#1|1.0.13#2|
|libxcomposite|0.4.7|0.4.7#1|
|libxdamage|1.1.7|1.1.7#1|
|libxdmcp|1.1.5|1.1.5#1|
|libxext|1.3.7|1.3.7#1|
|libxfixes|6.0.2|6.0.2#1|
|libxfont|2.0.5#1|2.0.5#2|
|libxft|2.3.9|2.3.9#1|
|libxi|1.8.2|1.8.2#1|
|libxinerama|1.1.6|1.1.6#1|
|libxml2|2.15.1|2.15.2|
|libxmu|1.1.3#1|1.1.3#2|
|libxpm|3.5.17|3.5.17#1|
|libxpresent|1.0.2|1.0.2#1|
|libxrandr|1.5.5|1.5.5#1|
|libxrender|0.9.12|0.9.12#1|
|libxres|1.2.1|1.2.1#1|
|libxscrnsaver|1.2.5|1.2.5#1|
|libxtst|1.2.5|1.2.5#1|
|libxv|1.0.13|1.0.13#1|
|libxxf86vm|1.1.7|1.1.7#1|
|lief|0.17.4|0.17.5|
|livepp|2.11.1|2.11.2|
|logme|2.4.12|2.4.13|
|ltla-subpar|0.4.1|0.5.0|
|luajit|2026-02-16|2026-03-04|
|luau|0.709|0.712|
|lunarg-vulkantools|1.4.335.0|1.4.341.0|
|manifold|3.3.2|3.4.0|
|matajoh-libnpy|2.1.0|2.1.2|
|mdl-sdk|2025.0.3#1|2025.0.5#1|
|mfx-dispatch|1.35.1#5|1.35.1#6|
|miniaudio|0.11.24|0.11.25|
|mongo-c-driver|2.2.2|2.2.3|
|mpc|1.3.1#2|1.3.1#3|
|mpfr|4.2.2|4.2.2#1|
|mpi|1#5|1#6|
|mqtt-cpp|13.2.2|13.2.3|
|msdfgen|1.13|1.13+new-skia-api|
|mujoco|3.4.0|3.5.0|
|mvfst|2025.05.19.00|2026.02.23.00|
|ncnn|20250916|20260113|
|ncurses|6.5#2|6.5#3|
|nlopt|2.10.1|2.10.1#1|
|nuklear|4.12.8|4.13.2|
|ocilib|4.8.0|4.8.0#1|
|octave|10.2.0#1|10.2.0#2|
|ois|1.5.1#2|1.6.0|
|openexr|3.4.5|3.4.7|
|openldap|2.6.10#1|2.6.12|
|openmpi|4.1.7#1|4.1.8|
|openssl|3.6.1#2|3.6.1#3|
|openvino|2025.3.0#1|2026.0.0#1|
|orefkov-simstr|1.7.1#1|1.7.3|
|osgearth|3.7.2#5|3.8|
|paraview|5.12.1#5|5.12.1#6|
|patternia|0.8.0|0.9.0|
|plf-colony|7.6.1|7.6.10|
|plf-list|2.7.24|2.8.0|
|proxy|4.0.1|4.0.2|
|proxygen|2025.05.19.00|2026.02.23.00|
|pthread-stubs|0.5|0.5#1|
|python3|3.12.9#9|3.12.13|
|qt|6.10.0|6.10.2|
|qt3d|6.10.0|6.10.2|
|qt5compat|6.10.0|6.10.2|
|qtactiveqt|6.10.0|6.10.2|
|qtapplicationmanager|6.10.0|6.10.2|
|qtbase|6.10.0#1|6.10.2|
|qtcharts|6.10.0|6.10.2|
|qtcoap|6.10.0|6.10.2|
|qtconnectivity|6.10.0|6.10.2|
|qtdatavis3d|6.10.0|6.10.2|
|qtdeclarative|6.10.0|6.10.2|
|qtdeviceutilities|6.10.0|6.10.2|
|qtdoc|6.10.0|6.10.2|
|qtgraphs|6.10.0|6.10.2|
|qtgrpc|6.10.0|6.10.2|
|qthttpserver|6.10.0|6.10.2|
|qtimageformats|6.10.0|6.10.2|
|qtinterfaceframework|6.10.0|6.10.2|
|qtlanguageserver|6.10.0|6.10.2|
|qtlocation|6.10.0|6.10.2|
|qtlottie|6.10.0|6.10.2|
|qtmqtt|6.10.0|6.10.2|
|qtmultimedia|6.10.0#3|6.10.2|
|qtnetworkauth|6.10.0|6.10.2|
|qtopcua|6.10.0|6.10.2|
|qtpositioning|6.10.0|6.10.2|
|qtquick3d|6.10.0|6.10.2|
|qtquick3dphysics|6.10.0|6.10.2|
|qtquickeffectmaker|6.10.0|6.10.2|
|qtquicktimeline|6.10.0|6.10.2|
|qtremoteobjects|6.10.0|6.10.2|
|qtscxml|6.10.0|6.10.2|
|qtsensors|6.10.0|6.10.2|
|qtserialbus|6.10.0|6.10.2|
|qtserialport|6.10.0|6.10.2|
|qtshadertools|6.10.0|6.10.2|
|qtspeech|6.10.0|6.10.2|
|qtsvg|6.10.0|6.10.2|
|qttools|6.10.0|6.10.2|
|qttranslations|6.10.0|6.10.2|
|qtvirtualkeyboard|6.10.0|6.10.2|
|qtwayland|6.10.0|6.10.2|
|qtwebchannel|6.10.0|6.10.2|
|qtwebengine|6.10.0|6.10.2|
|qtwebsockets|6.10.0|6.10.2|
|qtwebview|6.10.0|6.10.2|
|quill|11.0.2|11.1.0|
|readosm|1.1.0a#5|1.1.0a#6|
|rerun-sdk|0.30.0|0.30.2|
|roaring|4.5.0|4.6.1|
|s2n|1.6.4|1.7.1|
|sassc|3.6.2#1|3.6.2#2|
|saucer|6.0.1#5|6.0.1#6|
|sdbus-cpp|2.1.0|2.2.1|
|sentry-native|0.13.1|0.13.2#1|
|sfl|2.1.2|2.2.0|
|simd|6.2.158|6.2.159|
|simdjson|4.3.1|4.4.0|
|simdutf|8.0.0|8.2.0|
|simsimd|6.5.13|6.5.16|
|skia|144|146|
|solid3|3.5.8#3|3.5.8#4|
|speex|1.2.1#1|1.2.1#2|
|spirv-cross|1.4.335.0|1.4.341.0|
|spirv-headers|1.4.335.0|1.4.341.0|
|spirv-reflect|1.4.335.0|1.4.341.0|
|spirv-tools|1.4.335.0|1.4.341.0|
|sqlite3|3.51.2|3.52.0|
|st-tree|1.3.0|1.4.0|
|stlab|2.2.0|2.3.0|
|symengine|0.14.0|0.14.0#1|
|taocpp-json|2020-09-14#4|1.0.0-beta.14|
|thorvg|1.0.1|1.0.2|
|tmxlite|1.4.4|1.4.5|
|tree-sitter|0.26.6|0.26.7|
|usd|25.11|26.3|
|vcpkg-tool-meson|1.9.0#3|1.9.0#4|
|vk-bootstrap|1.4.335|1.4.341|
|volk|1.4.335.0|1.4.341.0|
|vowpal-wabbit|9.10.0#4|9.11.1|
|vsgimgui|0.7.0|0.7.0#1|
|vulkan-extensionlayer|1.4.335.0|1.4.341.0|
|vulkan-headers|1.4.335.0#1|1.4.341.0|
|vulkan-loader|1.4.335.0|1.4.341.0|
|vulkan-sdk-components|1.4.335.0|1.4.341.0|
|vulkan-tools|1.4.335.0|1.4.341.0|
|vulkan-utility-libraries|1.4.335.0|1.4.341.0|
|vulkan-validationlayers|1.4.335.0|1.4.341.0|
|wabt|1.0.39|1.0.40|
|wangle|2025.05.19.00|2026.02.23.00|
|wcslib|8.5|8.5#1|
|wolfssl|5.8.4#1|5.8.4#2|
|wt|4.12.3|4.12.5|
|xapian|1.4.22#2|1.4.22#3|
|xbitmaps|1.1.3|1.1.3#1|
|xcb|1.14#3|1.14#4|
|xcb-image|0.4.1|0.4.1#1|
|xcb-keysyms|0.4.1|0.4.1#1|
|xcb-proto|1.14.1#2|1.14.1#3|
|xcb-render-util|0.3.10|0.3.10#1|
|xcb-util|0.4.1#1|0.4.1#2|
|xcb-util-errors|1.0.1#1|1.0.1#2|
|xcb-util-wm|0.4.2#1|0.4.2#2|
|xorg-macros|1.20.2|1.20.2#1|
|xtl|0.8.1|0.8.2|
|xtrans|1.6.0|1.6.0#1|
|zxc|0.7.3|0.9.1|
</details>

<details>
<summary><b>The following 2 ports have been removed:</b></summary>

|port|
|---|
|arb|
|spine-runtimes|
</details>

* @castorNova2 made their first contribution in https://github.com/microsoft/vcpkg/pull/50235
* @rikyoz made their first contribution in https://github.com/microsoft/vcpkg/pull/50178
* @jlskuz made their first contribution in https://github.com/microsoft/vcpkg/pull/50121
* @nevergiveupcpp made their first contribution in https://github.com/microsoft/vcpkg/pull/50228
* @boardend made their first contribution in https://github.com/microsoft/vcpkg/pull/49429
* @JohnLangford made their first contribution in https://github.com/microsoft/vcpkg/pull/50263
* @hesphoros made their first contribution in https://github.com/microsoft/vcpkg/pull/50240
* @mprather made their first contribution in https://github.com/microsoft/vcpkg/pull/50322
* @ddtdanilo made their first contribution in https://github.com/microsoft/vcpkg/pull/50323
* @matajoh made their first contribution in https://github.com/microsoft/vcpkg/pull/50454
* @hoshiizumiya made their first contribution in https://github.com/microsoft/vcpkg/pull/50426
* @xARSENICx made their first contribution in https://github.com/microsoft/vcpkg/pull/49952
* @onalante-ebay made their first contribution in https://github.com/microsoft/vcpkg/pull/50408
* @dongle-the-gadget made their first contribution in https://github.com/microsoft/vcpkg/pull/50487
* @xiaotang2333333 made their first contribution in https://github.com/microsoft/vcpkg/pull/50494
* @benfoxworthy made their first contribution in https://github.com/microsoft/vcpkg/pull/50521

**Full Changelog**: https://github.com/microsoft/vcpkg/compare/2026.02.27...2026.03.18