https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-61688.htmlhttps://patchthecve.com/cve/CVE-2025-61688.htmlThu, 08 Oct 2026 12:10:00 +0000HIGH 8.6: Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.1.5 and 1.0.2, Omni might leak sensitive information via an API.https://patchthecve.com/cve/CVE-2025-59836.htmlhttps://patchthecve.com/cve/CVE-2025-59836.htmlThu, 08 Oct 2026 12:10:00 +0000MEDIUM 5.3: Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.1.5 and 1.0.2, there is a nil pointer dereference vulnerability in the Omni Resource Service allows unauthenticated users to cause a server panic and denial of service by sending empty create/update resource requests https://patchthecve.com/cve/CVE-2025-59824.htmlhttps://patchthecve.com/cve/CVE-2025-59824.htmlWed, 17 Jun 2026 09:46:46 +0000MEDIUM 5.4: Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to version 0.48.0, Omni Wireguard SideroLink has the potential to escape. Omni and each Talos machine establish a peer-to-peer (P2P) SideroLink connection using WireGuard to mutually authenticate and authorize access. The