Sylabs vulnerabilities

Products

• Singularity 17
• Sif 2
• Singularity Image Format 2
• Singularitypro 2

Newest

• sylabs singularity, singularitypro +1 more Singularity: Incorrect path matching for 'limit container paths' directive CVE-2026-47215 Fix available 4.8 MediumJune 4, 2026
• sylabs singularity Singluarity ineffectively applies of selinux / apparmor LSM process labels CVE-2025-64750 Fix available 4.5 MediumDecember 2, 2025
• apptainer, redhat enterprise linux, sylabs singularity +2 more Unpatched extfs vulnerabilities are exploitable through suid-mode Apptainer CVE-2023-30549 Fix available 7.1 HighApril 25, 2023
• sylabs scs-library-client, singularity container services library +1 more User credentials leaked to third-party service via HTTP redirect in scs-library-client CVE-2022-23538 Fix available 5.2 MediumJanuary 17, 2023
• sylabs sif, singularity image format +1 more Digital Signature Hash Algorithms Not Validated in sylabs/sif CVE-2022-39237 Fix available 6.3 MediumOctober 6, 2022
• sylabs singularity Sylabs Singularity Enterprise through 1.6.2 has Insufficient Entropy in a nonce. CVE-2021-33027 9.8 CriticalJuly 19, 2021
• sylabs singularity, singularitypro +1 more Sylabs Singularity 3.5.x and 3.6.x, and SingularityPRO before 3.5-8, has an Incorrect Check of a... CVE-2021-33622 9.8 CriticalJune 15, 2021
• sylabs singularity Action Commands (run/shell/exec) Against Library URIs Ignore Configured Remote Endpoint CVE-2021-32635 Fix available 6.3 MediumMay 28, 2021
• sylabs sif, singularity image format +1 more Predictable SIF UUID Identifiers CVE-2021-29499 Fix available 7.5 HighMay 7, 2021
• linuxfoundation umoci, sylabs singularity +1 more Improper input validation in umoci CVE-2021-29136 Fix available 5.5 MediumApril 6, 2021
• hpcng singularity, opensuse backports sle, leap +2 more Path traversal and files overwrite with unsquashfs CVE-2020-15229 Fix available 8.2 HighOctober 14, 2020
• sylabs singularity, opensuse leap +1 more Insecure permissions on build temporary rootfs in Singularity CVE-2020-25040 Fix available 8.8 HighSeptember 16, 2020
• sylabs singularity, opensuse leap +1 more Insecure permissions on user namespace / fakeroot temporary rootfs in Singularity CVE-2020-25039 Fix available 8.1 HighSeptember 16, 2020
• sylabs singularity "Verify All" Returns Success Despite Validation Failures in Singularity CVE-2020-13846 Fix available 7.5 HighJuly 14, 2020
• sylabs singularity Execution Control List (ECL) Is Insecure in Singularity CVE-2020-13845 Fix available 7.5 HighJuly 14, 2020
• sylabs singularity Security update for singularity CVE-2020-13847 Fix available 7.5 HighJuly 14, 2020
• sylabs singularity Singularity insecure permissions CVE-2019-19724 Fix available 7.5 HighDecember 18, 2019
• sylabs singularity, fedoraproject fedora, opensuse backports +1 more +3 more Incorrect Permission Assignment for Critical Resource in Singularity CVE-2019-11328 Fix available 8.8 HighMay 14, 2019
• sylabs singularity Sylabs Singularity Improper Input Validation CVE-2018-19295 Fix available 7.8 HighDecember 17, 2018
• sylabs singularity Singularity Incorrect Access Control CVE-2018-12021 Fix available 6.5 MediumJuly 5, 2018