- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 11 · 1 high, 3 medium
- Registry
- pkg.go.dev
Advisories 11
- CVE-2026-47215Medium 4.8
Singularity: Incorrect path matching for 'limit container paths' directive
Affected: all versions; through 3.1.1.
- CVE-2025-64750Medium 4.5
Singluarity ineffectively applies of selinux / apparmor LSM process labels
Affected: all versions.
- CVE-2021-32635Medium 6.3
Action Commands (run/shell/exec) Against Library URIs Ignore Configured Remote Endpoint
Affected: from 3.7.2, fixed in 3.7.4.
- CVE-2020-15229High 8.2
Path traversal and files overwrite with unsquashfs
Affected: from 3.1.1, fixed in 3.6.4.
- CVE-2020-25040Unrated
Sylabs Singularity through 3.6.2 has Insecure Permissions on temporary directories used in explicit and implicit container build…
Affected: fixed in 3.6.3.
- CVE-2020-25039Unrated
Sylabs Singularity 3.2.0 through 3.6.2 has Insecure Permissions on temporary directories used in fakeroot or user namespace container…
Affected: from 3.2.0, fixed in 3.6.3.
- CVE-2020-13846Unrated
Sylabs Singularity 3.5.0 through 3.5.3 fails to report an error in a Status Code.
Affected: from 3.5.0, fixed in 3.6.0.
- CVE-2020-13845Unrated
Sylabs Singularity 3.0 through 3.5 has Improper Validation of an Integrity Check Value.
Affected: from 3.0.0, fixed in 3.6.0.
- CVE-2019-19724Unrated
Insecure permissions (777) are set on $HOME/.singularity when it is newly created by Singularity (version from 3.3.0 to 3.5.1), which…
Affected: from 3.3.0, fixed in 3.5.2.
- CVE-2019-11328Unrated
An issue was discovered in Singularity 3.1.0 to 3.2.0-rc2, a malicious user with local/network access to the host system (e.g.
Affected: from 3.1.0, fixed in 3.2.0.
- CVE-2018-19295Unrated
Sylabs Singularity 2.4 to 2.6 allows local users to conduct Improper Input Validation attacks.
Affected: from 2.4.0, fixed in 2.6.1.