What is GHSA-77r9-w39m-9xh5?

GHSA-77r9-w39m-9xh5 is a security advisory published by GitHub Security Advisories with High severity. Omni vulnerable to information leak via API

Which CVE IDs does GHSA-77r9-w39m-9xh5 cover?

GHSA-77r9-w39m-9xh5 covers the following CVE IDs: CVE-2025-61688. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-77r9-w39m-9xh5?

GHSA-77r9-w39m-9xh5 has a CVSS v3 base score of 8.6, published by GitHub Security Advisories.

Which products are affected by GHSA-77r9-w39m-9xh5?

GHSA-77r9-w39m-9xh5 affects 2 products, including: go/github.com/siderolabs/omni:\u003e= 1.1.0-beta.0, \u003c= 1.1.4; go/github.com/siderolabs/omni:\u003c= 1.0.1.

GHSA-77r9-w39m-9xh5HighCVSS 8.6

Omni vulnerable to information leak via API

Vendor

GitHub Security Advisories

Published

October 13, 2025

Last Modified

November 5, 2025

🔗 CVE IDs covered (1)

CVE-2025-61688 →

📋 Description

Impact

Omni might leak sensitive information via an API.

Patches

v1.1.5, v1.0.2 and v1.2.0 contain the patch.

Workarounds

None.

References

None.

🎯 Affected products2

go/github.com/siderolabs/omni:>= 1.1.0-beta.0, <= 1.1.4
go/github.com/siderolabs/omni:<= 1.0.1

🔗 References (4)

https://github.com/siderolabs/omni/security/advisories/GHSA-77r9-w39m-9xh5
https://nvd.nist.gov/vuln/detail/CVE-2025-61688
https://pkg.go.dev/vuln/GO-2025-4022
https://github.com/advisories/GHSA-77r9-w39m-9xh5