Skip to content
OpenAdvisories

Package · Go

github.com/siderolabs/omni

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.7
    CVE-2026-45723

    Omni: Operator can traverse image-factory API paths via unsanitized `talos_version` in CreateSchematic

    Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.6.6 and 1.7.3, managementServer.CreateSchematic in internal/backend/grpc/schematics.go passes the caller-controlled TalosVersion field to imageFactoryClient.OverlaysVersions wi…

    siderolabs omni github.com/siderolabs/omni Go
  • Low 0.5
    CVE-2025-59824

    Omni Wireguard SideroLink potential escape

    Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to version 0.48.0, Omni Wireguard SideroLink has the potential to escape. Omni and each Talos machine establish a peer-to-peer (P2P) SideroLink connection using WireGuard to mutuall…

    siderolabs omni github.com/siderolabs/omni Go