Malicious code in quasar-windmill-hhsy (npm)

The package quasar-windmill-hhsy was found to contain malicious code...

MAL-2025-28763 Malicious code in papa-windmill-d18h (npm)

The package papa-windmill-d18h was found to contain malicious code...

MAL-2025-39319 Malicious code in windmill-ginkgo-ti06 (npm)

The package windmill-ginkgo-ti06 was found to contain malicious code...

MAL-2025-39321 Malicious code in windmill-yacht-ovlz (npm)

The package windmill-yacht-ovlz was found to contain malicious code...

Malicious code in papa-windmill-d18h (npm)

The package papa-windmill-d18h was found to contain malicious code...

MAL-2025-39318 Malicious code in windmill-elderberry-gcsv (npm)

The package windmill-elderberry-gcsv was found to contain malicious code...

Malicious code in zulu-windmill-o3ly (npm)

The package zulu-windmill-o3ly was found to contain malicious code...

Malicious code in windmill-violet-emp2 (npm)

The package windmill-violet-emp2 was found to contain malicious code...

Malicious code in hazel-windmill-tyeg (npm)

The package hazel-windmill-tyeg was found to contain malicious code...

MAL-2025-41221 Malicious code in zulu-windmill-o3ly (npm)

The package zulu-windmill-o3ly was found to contain malicious code...

windmill-cli (>=0.0.1, <=0.0.13) potentially affected by CVE-2025-55152 via @oakserver/oak (>=12.6.2, <=14.1.0)

@oakserver/oak NPM version =12.6.2, =0.0.1, =0.0.13 Source cves: CVE-2025-55152 Source advisory: SNYK:JS-OAKSERVEROAK-11735294...

CVE-2024-8462

A vulnerability was found in Windmill 1.380.0. It has been classified as problematic. Affected is an unknown function of the file backend/windmill-api/src/users.rs of the component HTTP Request Handler. The manipulation leads to improper restriction of excessive authentication attempts. It is...

Remote Authentication Rate Limiting Bypass

github.com/windmill-labs/windmill is vulnerable to Remote Authentication Rate Limiting Bypass. The vulnerability is due to improper handling of authentication attempts, which fails to restrict excessive attempts, allowing an attacker to exploit excessive authentication attempts remotely, with a...

GO-2024-3118 Windmill HTTP Request users.rs excessive authentication in github.com/windmill-labs/windmill

Windmill HTTP Request users.rs excessive authentication in github.com/windmill-labs/windmill...

Windmill HTTP Request users.rs excessive authentication in github.com/windmill-labs/windmill

A vulnerability was found in Windmill 1.380.0. It has been classified as problematic. Affected is an unknown function of the file backend/windmill-api/src/users.rs of the component HTTP Request Handler. The manipulation leads to improper restriction of excessive authentication attempts. It is...

GHSA-G6Q4-W3J3-JFC4 Windmill HTTP Request users.rs excessive authentication in github.com/windmill-labs/windmill

A vulnerability was found in Windmill 1.380.0. It has been classified as problematic. Affected is an unknown function of the file backend/windmill-api/src/users.rs of the component HTTP Request Handler. The manipulation leads to improper restriction of excessive authentication attempts. It is...

CVE-2024-8462

A vulnerability was found in Windmill 1.380.0. It has been classified as problematic. Affected is an unknown function of the file backend/windmill-api/src/users.rs of the component HTTP Request Handler. The manipulation leads to improper restriction of excessive authentication attempts. It is...

CVE-2024-8462 Windmill HTTP Request users.rs excessive authentication

A vulnerability was found in Windmill 1.380.0. It has been classified as problematic. Affected is an unknown function of the file backend/windmill-api/src/users.rs of the component HTTP Request Handler. The manipulation leads to improper restriction of excessive authentication attempts. It is...

CVE-2024-8462

Windmill 1.380.0 is affected by CVE-2024-8462 in the HTTP Request Handler (backend/windmill-api/src/users.rs), leading to improper restriction of excessive authentication attempts. The vulnerability is exploitable remotely with high attack complexity and low reported impact; upgrading to version ...

CVE-2024-8462 Windmill HTTP Request users.rs excessive authentication

A vulnerability was found in Windmill 1.380.0. It has been classified as problematic. Affected is an unknown function of the file backend/windmill-api/src/users.rs of the component HTTP Request Handler. The manipulation leads to improper restriction of excessive authentication attempts. It is...