HIGH8.8Go
GHSA-557g-r22w-9wvx· CVE-2019-11328Incorrect Permission Assignment for Critical Resource in Singularity
Modified: 11/8/2023
package
Go/github.com/sylabs/singularity
pkg:go/github.com/sylabs/singularity
MEDIUM6.3Go
GHSA-5mv9-q7fq-9394· CVE-2021-32635Action Commands (run/shell/exec) Against Library URIs Ignore Configured Remote Endpoint
Modified: 7/8/2026
HIGH7.5Go
GHSA-6w7g-p4jh-rf92· CVE-2020-13846"Verify All" Returns Success Despite Validation Failures in Singularity
Modified: 7/8/2026
HIGH8.2Go
GHSA-7gcp-w6ww-2xv9· CVE-2020-15229Path traversal and files overwrite with unsquashfs in singularity
Modified: 9/10/2026
HIGH8.8Go
GHSA-jv9c-w74q-6762· CVE-2020-25040Insecure permissions on build temporary rootfs in Singularity
Modified: 7/8/2026
HIGH7.5Go
GHSA-mj73-5x75-9phh· CVE-2019-19724Singularity insecure permissions
Modified: 11/8/2023
HIGH7.8Go
GHSA-p83v-8vmr-qfv9· CVE-2018-19295Sylabs Singularity Improper Input Validation
Modified: 11/8/2023
HIGH7.5Go
GHSA-pmfr-63c2-jr5c· CVE-2020-13845Execution Control List (ECL) Is Insecure in Singularity
Modified: 7/8/2026
HIGH8.1Go
GHSA-w6v2-qchm-grj7· CVE-2020-25039Insecure permissions on user namespace / fakeroot temporary rootfs in Singularity
Modified: 9/10/2026
MEDIUM4.8Go
GHSA-wqcr-7rf3-f64m· CVE-2026-47215, GO-2026-5715Singluarity: Incorrect path matching for 'limit container paths' directive
Modified: 6/25/2026
—Go
GO-2025-4177· CVE-2025-64750, GHSA-wwrx-w7c9-rf87Singularity ineffectively applies of selinux / apparmor LSM process labels in github.com/sylabs/singularity
Modified: 3/3/2026
—Go
GO-2026-5715· CVE-2026-47215, GHSA-wqcr-7rf3-f64mSingularity: Incorrect path matching for 'limit container paths' directive in github.com/sylabs/singularity
Modified: 6/25/2026