Security Advisories for github.com/siderolabs/omni in go
High
about 2 months ago
Omni: Reader-level users can retrieve imported cluster CA keys via ResourceService
go
github.com/siderolabs/omni
Low
about 2 months ago
Omni: Operator can traverse image-factory API paths via unsanitized `talos_version` in CreateSchematic
go
github.com/siderolabs/omni
High
about 2 months ago
Omni has a TOCTOU race condition that allows multiple concurrent uses of a single-use SAML session token
go
github.com/siderolabs/omni
Moderate
9 months ago
Omni is Vulnerable to DoS via Empty Create/Update Resource Requests
go
github.com/siderolabs/omni