Skip to content
OpenAdvisories

Package · Ubuntu

singularity-container

19 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 4.8
    CVE-2026-47215

    Singularity: Incorrect path matching for 'limit container paths' directive

    SingularityCE and SingularityPRO are open source container platforms. Prior to SingularityCE 4.4.2 and SingularityPRO 4.3.9 and 4.1.14, incorrect path-string matching in the singularity.conf limit container paths directive allows a container in a sibling dire…

    sylabs singularity SingularityPRO singularity-container Ubuntu Alpine Go
  • Medium 4.5
    CVE-2025-64750

    Singluarity ineffectively applies of selinux / apparmor LSM process labels

    SingularityCE and SingularityPRO are open source container platforms. Prior to SingularityCE 4.3.5 and SingularityPRO 4.1.11 and 4.3.5, if a user relies on LSM restrictions to prevent malicious operations then, under certain circumstances, an attacker can red…

    sylabs singularity singularity-container singularity Ubuntu Alpine Go
  • Medium 5.2
    CVE-2022-23538

    User credentials leaked to third-party service via HTTP redirect in scs-library-client

    github.com/sylabs/scs-library-client is the Go client for the Singularity Container Services (SCS) Container Library Service. When the scs-library-client is used to pull a container image, with authentication, the HTTP Authorization header sent by the client …

    sylabs scs-library-client singularity-container apptainer Ubuntu Alpine Go
  • Medium 5.5
    CVE-2021-4235

    Denial of service in gopkg.in/yaml.v2

    Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector.

    gopkg.in/yaml.v2 github.com/go-yaml/yaml gopkg.in/yaml.v2 github.com/go-yaml/yaml Debian Ubuntu Go
  • Medium 6.3
    CVE-2022-39237

    Digital Signature Hash Algorithms Not Validated in sylabs/sif

    syslabs/sif is the Singularity Image Format (SIF) reference implementation. In versions prior to 2.8.1the `github.com/sylabs/sif/v2/pkg/integrity` package did not verify that the hash algorithm(s) used are cryptographically secure when verifying digital signa…

    sylabs sif singularity-container apptainer Debian Ubuntu Alpine Go
  • Medium 6.3
    CVE-2021-32635

    Action Commands (run/shell/exec) Against Library URIs Ignore Configured Remote Endpoint

    Singularity is an open source container platform. In verions 3.7.2 and 3.7.3, Dde to incorrect use of a default URL, `singularity` action commands (`run`/`shell`/`exec`) specifying a container using a `library://` URI will always attempt to retrieve the conta…

    sylabs singularity singularity-container singularity Ubuntu Alpine Go
  • Medium 6.4
    CVE-2019-10214

    containers/image library Insufficiently Protects Credentials

    The containers/image library used by the container tools Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version 8 and CRI-O in OpenShift Container Platform, does not enforce TLS connections to the container registry authorization service. An attacker…

    singularity-container github.com/containers/image golang-github-containers-image Ubuntu Go
  • Medium 6.5
    CVE-2018-12021

    Singularity Incorrect Access Control

    Singularity 2.3.0 through 2.5.1 is affected by an incorrect access control on systems supporting overlay file system. When using the overlay option, a malicious user may access sensitive information by exploiting a few specific Singularity features.

    singularity-container github.com/hpcng/singularity Ubuntu Go