sylabs has 7 CVEs on record between 2021 and 2026. 1 was published in the last 90 days. The median CVSS is 7.5 (high). None have a confirmed exploitation report. Most affected products: github.com/sylabs/singularity (5), github.com/sylabs/sif (1), singularity (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.5
- Publish → KEV
- —
- Last 90 days
- 1 prev 0
Weakness classes
Products
- github.com/sylabs/singularity 5
- github.com/sylabs/sif 1
- singularity 1
Worst active — by depth score
CVE-2020-25040High· 8.8Insecure permissions on build temporary rootfs in Singularity49CVE-2020-15229High· 8.2Path traversal and files overwrite with unsquashfs in singularity46CVE-2020-13846High· 7.5"Verify All" Returns Success Despite Validation Failures in Singularity42CVE-2020-13845High· 7.5Execution Control List (ECL) Is Insecure in Singularity41CVE-2021-29499High· 7.5Predictable SIF UUID Identifiers in github.com/sylabs/sif41
sylabs vulnerabilities
CVEs affecting sylabs, newest first. Open any entry for full detail, references, and exploit status.
7 CVEsRSS
CVE-2026-47215Medium· 4.8SingularityCE and SingularityPRO are open source container platforms
SingularityCE and SingularityPRO are open source container platforms. Prior to SingularityCE 4.4.2 and SingularityPRO 4.3.9 and 4.1.14, incorrect path-string matching in the singularity.conf limit container paths directive allows a conta…
CVE-2020-13845High· 7.5Execution Control List (ECL) Is Insecure in Singularity
Execution Control List (ECL) Is Insecure in Singularity
CVE-2020-13846High· 7.5"Verify All" Returns Success Despite Validation Failures in Singularity
"Verify All" Returns Success Despite Validation Failures in Singularity
CVE-2021-32635Medium· 6.3Action Commands (run/shell/exec) Against Library URIs Ignore Configured Remote Endpoint
Action Commands (run/shell/exec) Against Library URIs Ignore Configured Remote Endpoint
CVE-2020-15229High· 8.2Path traversal and files overwrite with unsquashfs in singularity
Path traversal and files overwrite with unsquashfs in singularity
CVE-2020-25040High· 8.8Insecure permissions on build temporary rootfs in Singularity
Insecure permissions on build temporary rootfs in Singularity
CVE-2021-29499High· 7.5Predictable SIF UUID Identifiers in github.com/sylabs/sif
Predictable SIF UUID Identifiers in github.com/sylabs/sif