Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-31519
9.3
CRITICALCVSS v3
Published
July 11, 2022
CVSS v2
6.4 MEDIUM
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
The Lukasavicus/WindMill repository through 1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
windmill-labs/windmill
GitHubOpen-source developer platform to power your entire infra and turn scripts into webhooks, workflows and UIs. Fastest workflow engine (13x vs Airflow). Open-source alternative to Retool and Temporal.
GitHubOpen-source developer platform to power your entire infra and turn scripts into webhooks, workflows and UIs. Fastest workflow engine (13x vs Airflow). Open-source alternative to Retool and Temporal.= 1.0NVD