Skip to content
OpenAdvisories

Package · crates.io

windmill-api

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.1
    CVE-2026-54136

    Windmill: Resource-scoped API tokens can read script contents outside their allowed path via scripts/list_search

    Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs. Prior to 1.715.0, a resource-scoped API token could read script contents outside its allowed path scope through GET /api/w/{workspace}/scripts/list_sear…

    windmill-labs windmill windmill-api crates.io