Cloudanix VulnDB

GO-2025-4022

None

CVSS

—

EPSS

—

Published

Nov 5, 2025

CISA due date

—

The record

Omni vulnerable to information leak via API in github.com/siderolabs/omni

Affected packages

Ecosystem	Package	Introduced	Fixed
Go	github.com/siderolabs/omni	0	1.0.2
Go	github.com/siderolabs/omni	1.1.0-beta.0	1.1.5
go	github.com/siderolabs/omni	1.1.0-beta.0	1.1.5

Related vulnerabilities

GO-2025-4021 Omni is Vulnerable to DoS via Empty Create/Update Resource Requests in… Also affects github.com/siderolabs/omni
GO-2025-3979 Omni Wireguard SideroLink potential escape in github.com/siderolabs/omni Also affects github.com/siderolabs/omni