Advisories · Technology
Windmill Labs Windmill CE (Community Edition).
Every CVE that names Windmill Labs Windmill CE (Community Edition) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.4 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Windmill < 1.603.3 File Ownership Handling SQLi RCE
- Windmill Labs Windmill CE (Community Edition)
- Windmill Labs Windmill EE (Enterprise Edition)
- SQL injection
- CVSS 8.7 High
Windmill < 1.615.0 Operator Role Missing Authorization Checks RCE
- Windmill Labs Windmill CE (Community Edition)
- Windmill Labs Windmill EE (Enterprise Edition)
- Broken access control