2 matches found
GO-2026-5316 Omni: Operator can traverse image-factory API paths via unsanitized `talos_version` in CreateSchematic in github.com/siderolabs/omni
Omni: Operator can traverse image-factory API paths via unsanitized talosversion in CreateSchematic in github.com/siderolabs/omni...
5.8AI score0.00043EPSS
SaveExploits0References3
GO-2026-5160 Omni has a TOCTOU race condition that allows multiple concurrent uses of a single-use SAML session token in github.com/siderolabs/omni
Omni has a TOCTOU race condition that allows multiple concurrent uses of a single-use SAML session token in github.com/siderolabs/omni...
5.8AI score0.00018EPSS
SaveExploits0References3
20