github.com/siderolabs/omni
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Omni: Reader-level users can retrieve imported cluster CA keys via ResourceService | github.com/siderolabs/omni | Go | High | Fix reported | |
| Omni: Operator can traverse image-factory API paths via unsanitized `talos_version` in CreateSchematic | github.com/siderolabs/omni | Go | Low | Fix reported | |
| Omni has a TOCTOU race condition that allows multiple concurrent uses of a single-use SAML session token | github.com/siderolabs/omni | Go | High | Fix reported | |
| Omni vulnerable to information leak via API | github.com/siderolabs/omni | Go | High | Fix reported | |
| Omni is Vulnerable to DoS via Empty Create/Update Resource Requests | github.com/siderolabs/omni | Go | Medium | Fix reported | |
| Omni Wireguard SideroLink potential escape | github.com/siderolabs/omni | Go | Low | Fix reported |