Windmill: Resource-scoped API tokens can read script contents outside their allowed path via scripts/list_search
Moderate severity
GitHub Reviewed
Published
Jun 3, 2026
in
windmill-labs/windmill
•
Updated Jul 10, 2026
Give feedback on Dependabot alerts