—Go
GO-2026-5725· CVE-2026-45726, GHSA-wv8c-6mx2-xf4jOmni: Reader-level users can retrieve imported cluster CA keys via ResourceService in github.com/siderolabs/omni
Modified: 6/25/2026
package
Go/github.com/siderolabs/omni
pkg:go/github.com/siderolabs/omni
MEDIUM5.3Go
GHSA-4p3p-cr38-v5xp· CVE-2025-59836, GO-2025-4021Omni is Vulnerable to DoS via Empty Create/Update Resource Requests
Modified: 11/5/2025
HIGH7.0Go
GHSA-5x9f-6vg5-qg4m· CVE-2026-45720, GO-2026-5160Omni has a TOCTOU race condition that allows multiple concurrent uses of a single-use SAML session token
Modified: 6/25/2026
HIGH8.6Go
GHSA-77r9-w39m-9xh5· CVE-2025-61688, GO-2025-4022Omni vulnerable to information leak via API
Modified: 11/5/2025
LOW2.7Go
GHSA-c66c-vq6w-fvh5· CVE-2026-45723, GO-2026-5316Omni: Operator can traverse image-factory API paths via unsanitized `talos_version` in CreateSchematic
Modified: 6/25/2026
LOWGo
GHSA-hqrf-67pm-wgfq· CVE-2025-59824, GO-2025-3979Omni Wireguard SideroLink potential escape
Modified: 10/23/2025
HIGH7.6Go
GHSA-wv8c-6mx2-xf4j· CVE-2026-45726, GO-2026-5725Omni: Reader-level users can retrieve imported cluster CA keys via ResourceService
Modified: 6/25/2026
—Go
GO-2025-3979· CVE-2025-59824, GHSA-hqrf-67pm-wgfqOmni Wireguard SideroLink potential escape in github.com/siderolabs/omni
Modified: 3/3/2026
—Go
GO-2025-4021· CVE-2025-59836, GHSA-4p3p-cr38-v5xpOmni is Vulnerable to DoS via Empty Create/Update Resource Requests in github.com/siderolabs/omni
Modified: 3/3/2026
—Go
GO-2025-4022· CVE-2025-61688, GHSA-77r9-w39m-9xh5Omni vulnerable to information leak via API in github.com/siderolabs/omni
Modified: 3/3/2026
—Go
GO-2026-5160· CVE-2026-45720, GHSA-5x9f-6vg5-qg4mOmni has a TOCTOU race condition that allows multiple concurrent uses of a single-use SAML session token in github.com/siderolabs/omni
Modified: 6/25/2026
—Go
GO-2026-5316· CVE-2026-45723, GHSA-c66c-vq6w-fvh5Omni: Operator can traverse image-factory API paths via unsanitized `talos_version` in CreateSchematic in github.com/siderolabs/omni
Modified: 6/25/2026