SI
Product
singularity
17
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 9Medium 5Low 0
Watch
Add singularity to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-33027 | 9.8 | Jul 19 | Sylabs Singularity Enterprise through 1.6.2 has Insufficient Entropy in a nonce Affected: 1.2.0 before 1.2.6; 1.3.0 before 1.3.4; 1.4.0 before 1.4.4; 1.5.0 before 1.5.4; 1.6.0 before 1.6.3 |
| CVE-2021-33622 | 9.8 | Jun 15 | Sylabs Singularity 3.5.x and 3.6.x, and SingularityPRO before 3.5-8, has an Incorrect Check of a Function's Return Value Affected: 3.5.0 before 3.7.0 |
| CVE-2020-15229 | 9.3 | Oct 14 | Singularity (an open source container platform) from version 3.1.1 through 3.6.3 has a vulnerability Affected: 3.1.1 through 3.6.3 |
| CVE-2020-25040 | 8.8 | Sep 16 | Sylabs Singularity through 3.6.2 has Insecure Permissions on temporary directories used in explicit and implicit container build operations, a different vulnerability than… Affected: through 3.6.2 |
| CVE-2019-11328 | 8.8 | May 14 | An issue was discovered in Singularity 3.1.0 to 3.2.0-rc2, a malicious user with local/network access to the host system (e.g Affected: 3.1.0 before 3.2.0; 3.2.0; 3.2.0; 3.2.0 |
| CVE-2020-25039 | 8.1 | Sep 16 | Sylabs Singularity 3.2.0 through 3.6.2 has Insecure Permissions on temporary directories used in fakeroot or user namespace container execution Affected: 3.2.0 through 3.6.2 |
| CVE-2023-30549 | 7.8 | Apr 25 | Apptainer is an open source container platform for Linux Affected: All versions, or not specified |
| CVE-2018-19295 | 7.8 | Dec 17 | Sylabs Singularity 2.4 to 2.6 allows local users to conduct Improper Input Validation attacks Affected: 2.4 through 2.6.0 |
| CVE-2020-13847 | 7.5 | Jul 14 | Sylabs Singularity 3.0 through 3.5 lacks support for an Integrity Check Affected: 3.0.0 through 3.5.0 |
| CVE-2020-13846 | 7.5 | Jul 14 | Sylabs Singularity 3.5.0 through 3.5.3 fails to report an error in a Status Code Affected: 3.5.0 through 3.5.3 |
| CVE-2020-13845 | 7.5 | Jul 14 | Sylabs Singularity 3.0 through 3.5 has Improper Validation of an Integrity Check Value Affected: 3.0.0 through 3.5.0 |
| CVE-2019-19724 | 7.5 | Dec 18 | Insecure permissions (777) are set on $HOME/.singularity when it is newly created by Singularity (version from 3.3.0 to 3.5.1), which could lead to an information leak, and… Affected: 3.3.0 through 3.5.1 |
| CVE-2018-12021 | 6.5 | Jul 5 | Singularity 2.3.0 through 2.5.1 is affected by an incorrect access control on systems supporting overlay file system Affected: 2.3.0 through 2.5.1 |
| CVE-2021-32635 | 6.3 | May 28 | Singularity is an open source container platform Affected: 3.7.2; 3.7.3 |
| CVE-2021-29136 | 5.5 | Apr 6 | Open Container Initiative umoci before 0.4.7 allows attackers to overwrite arbitrary host paths via a crafted image that causes symlink traversal when "umoci unpack" or "umoci raw… Affected: before 3.7.3 |
| CVE-2026-47215 | 4.8 | Sep 15 | Singularity: Incorrect path matching for 'limit container paths' directive Affected: < 4.4.2 |
| CVE-2025-64750 | 4.5 | Dec 2 | Singluarity ineffectively applies of selinux / apparmor LSM process labels Affected: > 4.2.0-rc.1, < 4.3.5; < 4.1.11 |
Showing 17