Windmill-labs Windmill vulnerabilities
- windmill labs windmill Windmill Labs Windmill - Missing Authorization 5.4 Medium
- windmill labs windmill Windmill Labs Windmill - Missing Authorization 6.5 Medium
- windmill labs windmill Windmill Labs Windmill - Information Disclosure 6.5 Medium
- windmill-labs windmill Windmill: Resource-scoped API tokens can read script contents outside their allowed path via scripts/list_search 5.1 Medium
- windmill-labs windmill Windmill < 1.703.2 Incorrect Default Permissions in nsjail Configuration 8.6 High
- windmill Windmill: Rogue Workspace Admins can inject code via unescaped workspace environment variable interpolation in NativeTS executor 7.3 High
- windmill Windmill: SUPERADMIN_SECRET (rarely used) can be accessed publicly 6.9 Medium
- windmill Windmill Exposes Workspace Slack OAuth Client Secrets to Non-Admin Workspace Members 2.7 Low
- windmill-labs windmill Windmill HTTP Request users.rs excessive authentication 6.3 Medium