{"action":"Upgrade github.com/siderolabs/omni to 0.48.0 or later.","affected":[{"fixed":"0.48.0","introduced":"0"}],"component":"github.com/siderolabs/omni","cve_ids":["CVE-2025-59824"],"ecosystem":"Go","epss":0.00196,"exploited":false,"fixed_versions":["0.48.0"],"ghsa_id":"GHSA-hqrf-67pm-wgfq","id":"tcs_01M5KFCXWR6SAJGX6CZX09HAVN","modified_at":"2025-10-23T20:12:50Z","published_at":"2025-09-24T18:57:19Z","references":["https://osv.dev/vulnerability/GHSA-hqrf-67pm-wgfq","https://github.com/siderolabs/omni/security/advisories/GHSA-hqrf-67pm-wgfq","https://nvd.nist.gov/vuln/detail/CVE-2025-59824","https://github.com/siderolabs/omni/commit/a5efd816a239e6c9e5ea7c0d43c02c04504d7b60","https://github.com/siderolabs/omni","https://pkg.go.dev/vuln/GO-2025-3979"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-hqrf-67pm-wgfq","url":"https://osv.dev/vulnerability/GHSA-hqrf-67pm-wgfq"},{"source":"nvd","source_id":"CVE-2025-59824","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-59824"}],"summary":"Omni Wireguard SideroLink potential escape"}