CVE-2026-45723

Omni (SideroLabs), a Kubernetes management platform, is vulnerable to same-host path traversal via the managementServer.CreateSchematic gRPC endpoint. The caller-controlled TalosVersion field is passed unsanitized to imageFactoryClient.OverlaysVersions, where url.URL.JoinPath resolves ../ sequenc...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: docker-fips, tflint-fips, ratify-fips, crossplane, tbot, cloudbeat-fips, spire-server-fips, tkn-fips, aactl, tflint, zarf-fips, kubescape, trivy-operator, tkn, trivy-operator-fips, tekton-chains, kyverno-fips, image-factory, gitsign, image-factory-fips, falcoctl,...

GO-2026-5316 Omni: Operator can traverse image-factory API paths via unsanitized `talos_version` in CreateSchematic in github.com/siderolabs/omni

Omni: Operator can traverse image-factory API paths via unsanitized talosversion in CreateSchematic in github.com/siderolabs/omni...

Omni: Operator can traverse image-factory API paths via unsanitized `talos_version` in CreateSchematic

Summary managementServer.CreateSchematic internal/backend/grpc/schematics.go passes the caller-controlled TalosVersion field directly to imageFactoryClient.OverlaysVersions, which embeds it verbatim into a fmt.Sprintf"/version/%s/overlays/official", talosVersion path template. url.URL.JoinPath...

GHSA-C66C-VQ6W-FVH5 Omni: Operator can traverse image-factory API paths via unsanitized `talos_version` in CreateSchematic

Summary managementServer.CreateSchematic internal/backend/grpc/schematics.go passes the caller-controlled TalosVersion field directly to imageFactoryClient.OverlaysVersions, which embeds it verbatim into a fmt.Sprintf"/version/%s/overlays/official", talosVersion path template. url.URL.JoinPath...

PT-2026-46988

Name of the Vulnerable Software and Affected Versions Omni affected versions not specified Description An authenticated Operator can perform a same-host path traversal by exploiting the managementServer.CreateSchematic internal/backend/grpc/schematics.go function. The issue occurs because the...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sqs-fips, packer, openbao, terraform-provider-databricks, grafana-alloy, cert-manager-cmctl, crossplane-provider-aws-memorydb-fips, crossplane-provider-aws-sqs, crossplane-provider-aws-elasticache-fips, terraform-provider-azuread, apko-fips,...

GHSA-JQC5-W2XX-5VQ4 vulnerabilities

Vulnerabilities for packages: tflint-fips, crossplane, sigstore-scaffolding, spire-server-fips, cosign, tkn-fips, tflint, flux-source-controller, kubescape, buildkitd, trivy-operator, tkn, trivy-operator-fips, ko, cosign-fips, spire-server, tekton-chains, zot, kyverno-fips, image-factory, gitsign...

CVE-2026-24686 vulnerabilities

Vulnerabilities for packages: tflint-fips, crossplane, sigstore-scaffolding, spire-server-fips, cosign, tkn-fips, tflint, flux-source-controller, kubescape, buildkitd, trivy-operator, tkn, trivy-operator-fips, ko, cosign-fips, spire-server, tekton-chains, zot, kyverno-fips, image-factory, gitsign...

Horde - Horde_Image::factory driver Argument Local File Inclusion

Horde - HordeImage::factory driver Argument Local File Inclusion Exploit Title: Horde HordeImage::factory driver Argument Local File Inclusion Google Dork: intitle:horde Date: 10-02-2011 Author: skysbsb Software Link: http://www.horde.org/download/ Version: Horde 3.3.2 Tested on: linux CVE :...

Horde Local File Inclusion

Exploit Title: Horde HordeImage::factory driver Argument Local File Inclusion Google Dork: intitle:horde Date: 10-02-2011 Author: skysbsb Software Link: http://www.horde.org/download/ Version: Horde 3.3.2 Tested on: linux CVE : CVE-2009-0932 The original disclosure was done by Gunnar Wrobel from...