Skip to content
OpenAdvisories

Package · Go

github.com/sylabs/singularity

11 known vulnerabilities.

3 results · Clear filters · Feed

  • Medium 4.8

    Singularity: Incorrect path matching for 'limit container paths' directive

    SingularityCE and SingularityPRO are open source container platforms. Prior to SingularityCE 4.4.2 and SingularityPRO 4.3.9 and 4.1.14, incorrect path-string matching in the singularity.conf limit container paths directive allows a container in a sibling dire…

  • Medium 4.5

    Singluarity ineffectively applies of selinux / apparmor LSM process labels

    SingularityCE and SingularityPRO are open source container platforms. Prior to SingularityCE 4.3.5 and SingularityPRO 4.1.11 and 4.3.5, if a user relies on LSM restrictions to prevent malicious operations then, under certain circumstances, an attacker can red…

  • Medium 6.3

    Action Commands (run/shell/exec) Against Library URIs Ignore Configured Remote Endpoint

    Singularity is an open source container platform. In verions 3.7.2 and 3.7.3, Dde to incorrect use of a default URL, `singularity` action commands (`run`/`shell`/`exec`) specifying a container using a `library://` URI will always attempt to retrieve the conta…