Siderolabs vulnerabilities
Products
Newest
- siderolabs talos Talos Linux: Support bundle does not redact registry credentials 3.3 Low
- siderolabs omni Omni: Reader-level users can retrieve imported cluster CA keys via ResourceService 7.6 High
- siderolabs omni Omni: Operator can traverse image-factory API paths via unsanitized `talos_version` in CreateSchematic 2.7 Low
- siderolabs omni Omni: TOCTOU race condition allows multiple concurrent uses of a single-use SAML session token 7.0 High
- siderolabs omni Omni leaks information via the API 8.6 High
- siderolabs omni Omni is Vulnerable to DoS via Empty Create/Update Resource Requests 5.3 Medium
- siderolabs omni Omni Wireguard SideroLink potential escape 0.5 Low
- siderolabs talos, talos linux +1 more Talos worker join token can be used to get elevated access level to the Talos API 7.2 High