Siderolabs Omni vulnerabilities
- siderolabs omniOmni: Reader-level users can retrieve imported cluster CA keys via ResourceService7.6 High
- siderolabs omniOmni: Operator can traverse image-factory API paths via unsanitized `talos_version` in CreateSchematic2.7 Low
- siderolabs omniOmni: TOCTOU race condition allows multiple concurrent uses of a single-use SAML session token7.0 High
- siderolabs omniOmni leaks information via the API8.6 High
- siderolabs omniOmni is Vulnerable to DoS via Empty Create/Update Resource Requests5.3 Medium
- siderolabs omniOmni Wireguard SideroLink potential escape0.5 Low