siderolabs omni

• CVE-2026-45720 High 7.0 Omni: TOCTOU race condition allows multiple concurrent uses of a single-use SAML session token 0.1%
• CVE-2026-45723 Low 2.7 Omni: Operator can traverse image-factory API paths via unsanitized `talos_version` in CreateSchematic 0.5%
• CVE-2026-45726 High 7.6 Omni: Reader-level users can retrieve imported cluster CA keys via ResourceService 0.1%
• CVE-2025-61688 High 8.6 Omni leaks information via the API 0.3%
• CVE-2025-59836 Medium 5.3 Omni is Vulnerable to DoS via Empty Create/Update Resource Requests 0.6%
• CVE-2025-59824 Low 0.5 Omni Wireguard SideroLink potential escape 0.2%