Known CVE

Windmill/Nextcloud Flow < 1.603.3 - Unauthenticated Path Traversal

Windmill < 1.603.3 contains a path traversal caused by unsanitized filename parameter in get_log_file endpoint, letting unauthenticated attackers read arbitrary files on the server, exploit requires no authentication.