github.com/siderolabs/omni
Go6 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting github.com/siderolabs/omnipage 1 of 1
- CVE-2025-59824MEDIUMCVSS 5.4EG 5.4fixed in 0.48.02025-09-24
Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to version 0.48.0, Omni Wireguard SideroLink has the potential to escape. Omni and each Talos machine establish a peer-to-peer (P2P) SideroLink connection using …
- CVE-2025-59836HIGHCVSS 7.5EG 7.5fixed in 1.1.5 or 1.0.2, by version range2025-10-13
Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.1.5 and 1.0.2, there is a nil pointer dereference vulnerability in the Omni Resource Service allows unauthenticated users to cause a server panic and denial…
- CVE-2025-61688HIGHCVSS 7.5EG 7.5fixed in 1.1.5 or 1.0.2, by version range2025-10-13
Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.1.5 and 1.0.2, Omni might leak sensitive information via an API.
- CVE-2026-45720HIGHCVSS 7.0EG 7.0fixed in 1.6.6 or 1.7.3, by version range2026-06-05
Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.6.6 and from 1.7.0 until 1.7.3, SAML.getSession in internal/pkg/auth/interceptor/saml.go checks SAMLAssertion.Used and marks it used in separate state opera…
- CVE-2026-45723LOWCVSS 2.7EG 2.7fixed in 1.6.6 or 1.7.3, by version range2026-06-05
Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.6.6 and 1.7.3, managementServer.CreateSchematic in internal/backend/grpc/schematics.go passes the caller-controlled TalosVersion field to imageFactoryClient…
- CVE-2026-45726HIGHCVSS 7.6EG 7.6fixed in 1.6.6 or 1.7.3, by version range2026-06-05
Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. From 1.3.0 until 1.6.6 and 1.7.3, importing a standalone Talos cluster creates an ImportedClusterSecrets resource containing the cluster's complete CA secrets bundle. …
Check whether github.com/siderolabs/omni is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for github.com/siderolabs/omni CVEs against the assets you own.
Book a Demo →