github.com/siderolabs/omni vulnerabilities (Go)

6 vulnerabilities.

• github.com/siderolabs/omni Go Omni: Reader-level users can retrieve imported cluster CA keys via ResourceService CVE-2026-45726 Fix available 7.6 HighJune 5, 2026
• github.com/siderolabs/omni Go Omni: Operator can traverse image-factory API paths via unsanitized `talos_version` in CreateSchematic CVE-2026-45723 Fix available 2.7 LowJune 5, 2026
• github.com/siderolabs/omni Go Omni: TOCTOU race condition allows multiple concurrent uses of a single-use SAML session token CVE-2026-45720 Fix available 7.0 HighJune 5, 2026
• github.com/siderolabs/omni Go Omni leaks information via the API CVE-2025-61688 Fix available 8.6 HighOctober 13, 2025
• github.com/siderolabs/omni Go Omni is Vulnerable to DoS via Empty Create/Update Resource Requests CVE-2025-59836 Fix available 5.3 MediumOctober 13, 2025
• github.com/siderolabs/omni Go Omni Wireguard SideroLink potential escape CVE-2025-59824 Fix available 0.5 LowSeptember 24, 2025