github.com/sylabs/singularity vulnerabilities
CVEs whose affected-version data names the github.com/sylabs/singularity package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
5 CVEsRSS
CVE-2020-13845High· 7.5Execution Control List (ECL) Is Insecure in Singularity
Execution Control List (ECL) Is Insecure in Singularity
▾ Twilightsylabs · github.com/sylabs/singularityEPSS 0.52%via OSV
CVE-2020-13846High· 7.5"Verify All" Returns Success Despite Validation Failures in Singularity
"Verify All" Returns Success Despite Validation Failures in Singularity
▾ Twilightsylabs · github.com/sylabs/singularityEPSS 1.3%via OSV
CVE-2021-32635Medium· 6.3Action Commands (run/shell/exec) Against Library URIs Ignore Configured Remote Endpoint
Action Commands (run/shell/exec) Against Library URIs Ignore Configured Remote Endpoint
▾ Sunlitsylabs · github.com/sylabs/singularityEPSS 1.4%via OSV
CVE-2020-15229High· 8.2Path traversal and files overwrite with unsquashfs in singularity
Path traversal and files overwrite with unsquashfs in singularity
▾ Twilightsylabs · github.com/sylabs/singularityEPSS 2.0%via OSV
CVE-2020-25040High· 8.8Insecure permissions on build temporary rootfs in Singularity
Insecure permissions on build temporary rootfs in Singularity
▾ Twilightsylabs · github.com/sylabs/singularityEPSS 2.0%via OSV