windmill

windmill 1.601.1 · pkgs/by-name/wi/windmill/package.nix

Health

Risk

risk 44 high

+35 2 open advisories
+8 NIXPKGS-2026-1692 has a public exploit (CISA)
+1 no versionCheckHook

Version

1.601.1 no newer release known to repology

Channels

master 1.601.1 · nixos-unstable 1.601.1 · nixos-26.05 1.601.1 no channel is behind master

Hydra

succeeded 1d ago

Advisories

NIXPKGS-2026-1692 high 8.6 public exploit EPSS 0.3% · #522557

CVE-2026-47107

NIXPKGS-2026-2405 medium 6.5 EPSS 0.4% windmill: security issues < 1.783.0 · #552164

CVE-2026-72539, CVE-2026-72541, CVE-2026-72542

Packaging

no versionCheckHook

Packagewhat each field means

Description

Open-source developer platform to turn scripts into workflows and UIs

Homepage

https://windmill.dev

Changelog

https://github.com/windmill-labs/windmill/blob/v1.601.1/CHANGELOG.md

License

AGPL-3.0-only

Platforms

2 platforms: Linux · not on pattern

Main program

windmill

Source provenance

not set: built from source

Outputs

out

Status

not broken, not insecure, free

Position

pkgs/by-name/wi/windmill/package.nix:251

Maintainers

happysalada

Version bumps 0all open bumps

None open.

Pull requests 1

windmill: Only test package on x86_64-linux

#467235 by Bert-Proesmans · opened 10mo ago · checks pass

Issues 3

windmill: security issues < 1.783.0 1.severity: security

#552164 by nixpkgs-security-tracker · opened 2mo ago · 0 comments

Windmill: Rogue Workspace Admins can inject code via unescaped workspace environment variable interpolation in NativeTS executor 1.severity: security

#504460 by nixpkgs-security-tracker · opened 6mo ago · 0 comments

Windmill: SUPERADMIN_SECRET (rarely used) can be accessed publicly 1.severity: security

#497603 by nixpkgs-security-tracker · opened 7mo ago · 0 comments