Skip to content
OpenAdvisories

Package · Go

github.com/hpcng/singularity

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.3
    GHSA-jq42-hfch-42f3

    Action Commands (run/shell/exec) Against Library URIs Ignore Configured Remote Endpoint

    # Impact Due to incorrect use of a default URL, `singularity` action commands (`run`/`shell`/`exec`) specifying a container using a `library://` URI will always attempt to retrieve the container from the default remote endpoint (`cloud.sylabs.io`) rather than…

    github.com/hpcng/singularity Go
  • Medium 6.5
    CVE-2018-12021

    Singularity Incorrect Access Control

    Singularity 2.3.0 through 2.5.1 is affected by an incorrect access control on systems supporting overlay file system. When using the overlay option, a malicious user may access sensitive information by exploiting a few specific Singularity features.

    singularity-container github.com/hpcng/singularity Ubuntu Go