Skip to content
OpenAdvisories

Package · Alpine

apptainer

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.8
    CVE-2026-48785

    Apptainer: Incorrect path matching for 'limit container paths' directive

    Apptainer is an open source container platform. Prior to version 1.5.1, Image.AuthorizedPath applies plain string-prefix matching to the limit container paths directive in apptainer.conf, so an allowed path such as /data/safe also authorizes a sibling path su…

    apptainer apptainer apptainer github.com/apptainer/apptainer Ubuntu Alpine Go
  • Medium 4.5
    CVE-2025-65105

    Apptainer ineffective application of selinux and apparmor --security options

    Apptainer is an open source container platform. In Apptainer versions less than 1.4.5, a container can disable two of the forms of the little used --security option, in particular the forms --security=apparmor:<profile> and --security=selinux:<label> which ot…

    apptainer apptainer apptainer github.com/apptainer/apptainer Ubuntu Alpine Go
  • Medium 5.2
    CVE-2022-23538

    User credentials leaked to third-party service via HTTP redirect in scs-library-client

    github.com/sylabs/scs-library-client is the Go client for the Singularity Container Services (SCS) Container Library Service. When the scs-library-client is used to pull a container image, with authentication, the HTTP Authorization header sent by the client …

    sylabs scs-library-client singularity-container apptainer Ubuntu Alpine Go
  • Medium 6.3
    CVE-2022-39237

    Digital Signature Hash Algorithms Not Validated in sylabs/sif

    syslabs/sif is the Singularity Image Format (SIF) reference implementation. In versions prior to 2.8.1the `github.com/sylabs/sif/v2/pkg/integrity` package did not verify that the hash algorithm(s) used are cryptographically secure when verifying digital signa…

    sylabs sif singularity-container apptainer Debian Ubuntu Alpine Go