WI
Product
windmill
by windmill-labs · last CVE Aug 20, 2026
8
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 4Low 1
Watch

Add windmill to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-72541
6.5
0%
Aug 11
Windmill Labs Windmill - Missing Authorization
Affected: through 1.783.0
CVE-2026-72539
6.5
0%
Aug 11
Windmill Labs Windmill - Information Disclosure
Affected: through 1.783.0
CVE-2026-72542
5.4
0%
Aug 11
Windmill Labs Windmill - Missing Authorization
Affected: through 1.783.0
CVE-2026-54136
5.1
0%
Aug 20
Windmill: Resource-scoped API tokens can read script contents outside their allowed path via scripts/list_search
Affected: < 1.715.0
Showing 4