SY
Vendor
sylabs
23
CVEs
0
On KEV
0
New 30D
Products
SI9.8
singularity
sylabs
17 CVEs0 on KEV0 new
SI9.8
Singularity Image Format
Sylabs
2 CVEs0 on KEV0 new
SI9.8
SingularityPRO
sylabs
2 CVEs0 on KEV0 new
SI9.8
sif
sylabs
1 CVEs0 on KEV0 new
SC7.6
Singularity Container Services Library
Sylabs
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-47215 | SI singularity sylabs | 4.8 | Sep 15 | Singularity: Incorrect path matching for 'limit container paths' directive |
| CVE-2025-64750 | SI singularity sylabs | 4.5 | Dec 2 | Singluarity ineffectively applies of selinux / apparmor LSM process labels |
| CVE-2023-30549 | SI Singularity Sylabs | 7.8 | Apr 25 | Apptainer is an open source container platform for Linux |
| CVE-2022-23538 | SC Singularity Container Services Library Sylabs | 7.6 | Jan 17 | github.com/sylabs/scs-library-client is the Go client for the Singularity Container Services (SCS) Container Library Service |
| CVE-2022-39237 | SI sif sylabs | 9.8 | Oct 6 | Digital Signature Hash Algorithms Not Validated in sylabs/sif |
| CVE-2021-33027 | SI Singularity Sylabs | 9.8 | Jul 19 | Sylabs Singularity Enterprise through 1.6.2 has Insufficient Entropy in a nonce |
| CVE-2021-33622 | SI Singularity Sylabs | 9.8 | Jun 15 | Sylabs Singularity 3.5.x and 3.6.x, and SingularityPRO before 3.5-8, has an Incorrect Check of a Function's Return Value |
| CVE-2021-32635 | SI Singularity Sylabs | 6.3 | May 28 | Singularity is an open source container platform |
| CVE-2021-29499 | SI Singularity Image Format Sylabs | 7.5 | May 7 | SIF is an open source implementation of the Singularity Container Image Format |
| CVE-2021-29136 | SI Singularity Sylabs | 5.5 | Apr 6 | Open Container Initiative umoci before 0.4.7 allows attackers to overwrite arbitrary host paths via a crafted image that causes symlink traversal when "umoci unpack" or "umoci raw… |
| CVE-2020-15229 | SI Singularity Sylabs | 9.3 | Oct 14 | Singularity (an open source container platform) from version 3.1.1 through 3.6.3 has a vulnerability |
| CVE-2020-25040 | SI Singularity Sylabs | 8.8 | Sep 16 | Sylabs Singularity through 3.6.2 has Insecure Permissions on temporary directories used in explicit and implicit container build operations, a different vulnerability than… |
| CVE-2020-25039 | SI Singularity Sylabs | 8.1 | Sep 16 | Sylabs Singularity 3.2.0 through 3.6.2 has Insecure Permissions on temporary directories used in fakeroot or user namespace container execution |
| CVE-2020-13847 | SI Singularity Sylabs | 7.5 | Jul 14 | Sylabs Singularity 3.0 through 3.5 lacks support for an Integrity Check |
| CVE-2020-13846 | SI Singularity Sylabs | 7.5 | Jul 14 | Sylabs Singularity 3.5.0 through 3.5.3 fails to report an error in a Status Code |
| CVE-2020-13845 | SI Singularity Sylabs | 7.5 | Jul 14 | Sylabs Singularity 3.0 through 3.5 has Improper Validation of an Integrity Check Value |
| CVE-2019-19724 | SI Singularity Sylabs | 7.5 | Dec 18 | Insecure permissions (777) are set on $HOME/.singularity when it is newly created by Singularity (version from 3.3.0 to 3.5.1), which could lead to an information leak, and… |
| CVE-2019-11328 | SI Singularity Sylabs | 8.8 | May 14 | An issue was discovered in Singularity 3.1.0 to 3.2.0-rc2, a malicious user with local/network access to the host system (e.g |
| CVE-2018-19295 | SI Singularity Sylabs | 7.8 | Dec 17 | Sylabs Singularity 2.4 to 2.6 allows local users to conduct Improper Input Validation attacks |
| CVE-2018-12021 | SI Singularity Sylabs | 6.5 | Jul 5 | Singularity 2.3.0 through 2.5.1 is affected by an incorrect access control on systems supporting overlay file system |
