[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fa3_e_IVLveyy8Ac-7z_95gSmMCo4bFhVCFjWUOVbUGc":3,"g5a-ex:sylabs\u002Fsingularity@*":283,"g5a-family:sylabs\u002Fsingularity":285},{"success":4,"data":5},true,{"product":6,"versions":137,"topVulnerabilitiesByEpss":198,"kevVulnerabilities":260,"seoMetadata":261,"meta":280},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":136},"sylabs","singularity",60,15,0,"2023-04-25",[14,17,19,21,23,25,27,29,31,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,89,91,93,96,98,100,102,104,106,108,110,112,114,116,118,120,122,124,126,128,130,132,134],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"1.0",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.0",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.6",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"1.3.0",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"1.3.4",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"1.4.0",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"1.4.4",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"1.5.0",{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},"1.5.4",{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},"1.6.0",{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},"1.6.3",{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},"2.0",{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},"2.1",{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},"2.1.1",{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},"2.1.2",{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},"2.2",{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},"2.2.1",{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},"2.3.0",{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},"2.3.1",{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},"2.3.2",{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},"2.4",{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},"2.4.1",{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},"2.4.2",{"version":62,"cve_count":11,"kev_count":11,"has_kev":16},"2.4.3",{"version":64,"cve_count":11,"kev_count":11,"has_kev":16},"2.4.3-1",{"version":66,"cve_count":11,"kev_count":11,"has_kev":16},"2.4.4",{"version":68,"cve_count":11,"kev_count":11,"has_kev":16},"2.4.5",{"version":70,"cve_count":11,"kev_count":11,"has_kev":16},"2.4.6",{"version":72,"cve_count":11,"kev_count":11,"has_kev":16},"2.5.0",{"version":74,"cve_count":11,"kev_count":11,"has_kev":16},"2.5.1",{"version":76,"cve_count":11,"kev_count":11,"has_kev":16},"2.5.2",{"version":78,"cve_count":11,"kev_count":11,"has_kev":16},"2.6.0",{"version":80,"cve_count":11,"kev_count":11,"has_kev":16},"2.6.1",{"version":82,"cve_count":11,"kev_count":11,"has_kev":16},"3.0.0",{"version":84,"cve_count":11,"kev_count":11,"has_kev":16},"3.0.1",{"version":86,"cve_count":11,"kev_count":11,"has_kev":16},"3.0.2",{"version":88,"cve_count":11,"kev_count":11,"has_kev":16},"3.0.3",{"version":90,"cve_count":11,"kev_count":11,"has_kev":16},"3.1.0",{"version":92,"cve_count":11,"kev_count":11,"has_kev":16},"3.1.1",{"version":94,"cve_count":95,"kev_count":11,"has_kev":16},"3.2.0",1,{"version":97,"cve_count":11,"kev_count":11,"has_kev":16},"3.2.1",{"version":99,"cve_count":11,"kev_count":11,"has_kev":16},"3.3.0",{"version":101,"cve_count":11,"kev_count":11,"has_kev":16},"3.4.0",{"version":103,"cve_count":11,"kev_count":11,"has_kev":16},"3.4.1",{"version":105,"cve_count":11,"kev_count":11,"has_kev":16},"3.4.2",{"version":107,"cve_count":11,"kev_count":11,"has_kev":16},"3.5.0",{"version":109,"cve_count":11,"kev_count":11,"has_kev":16},"3.5.1",{"version":111,"cve_count":11,"kev_count":11,"has_kev":16},"3.5.2",{"version":113,"cve_count":11,"kev_count":11,"has_kev":16},"3.5.3",{"version":115,"cve_count":11,"kev_count":11,"has_kev":16},"3.6.0",{"version":117,"cve_count":11,"kev_count":11,"has_kev":16},"3.6.1",{"version":119,"cve_count":11,"kev_count":11,"has_kev":16},"3.6.2",{"version":121,"cve_count":11,"kev_count":11,"has_kev":16},"3.6.3",{"version":123,"cve_count":11,"kev_count":11,"has_kev":16},"3.6.4",{"version":125,"cve_count":11,"kev_count":11,"has_kev":16},"3.7.0",{"version":127,"cve_count":11,"kev_count":11,"has_kev":16},"3.7.1",{"version":129,"cve_count":95,"kev_count":11,"has_kev":16},"3.7.2",{"version":131,"cve_count":95,"kev_count":11,"has_kev":16},"3.7.3",{"version":133,"cve_count":11,"kev_count":11,"has_kev":16},"3.7.4",{"version":135,"cve_count":11,"kev_count":11,"has_kev":16},"3.8.0","Singularity by Sylabs is a technology product with 60 tracked versions and 15 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},{"version":62,"cve_count":11,"kev_count":11,"has_kev":16},{"version":64,"cve_count":11,"kev_count":11,"has_kev":16},{"version":66,"cve_count":11,"kev_count":11,"has_kev":16},{"version":68,"cve_count":11,"kev_count":11,"has_kev":16},{"version":70,"cve_count":11,"kev_count":11,"has_kev":16},{"version":72,"cve_count":11,"kev_count":11,"has_kev":16},{"version":74,"cve_count":11,"kev_count":11,"has_kev":16},{"version":76,"cve_count":11,"kev_count":11,"has_kev":16},{"version":78,"cve_count":11,"kev_count":11,"has_kev":16},{"version":80,"cve_count":11,"kev_count":11,"has_kev":16},{"version":82,"cve_count":11,"kev_count":11,"has_kev":16},{"version":84,"cve_count":11,"kev_count":11,"has_kev":16},{"version":86,"cve_count":11,"kev_count":11,"has_kev":16},{"version":88,"cve_count":11,"kev_count":11,"has_kev":16},{"version":90,"cve_count":11,"kev_count":11,"has_kev":16},{"version":92,"cve_count":11,"kev_count":11,"has_kev":16},{"version":94,"cve_count":95,"kev_count":11,"has_kev":16},{"version":97,"cve_count":11,"kev_count":11,"has_kev":16},{"version":99,"cve_count":11,"kev_count":11,"has_kev":16},{"version":101,"cve_count":11,"kev_count":11,"has_kev":16},{"version":103,"cve_count":11,"kev_count":11,"has_kev":16},{"version":105,"cve_count":11,"kev_count":11,"has_kev":16},{"version":107,"cve_count":11,"kev_count":11,"has_kev":16},{"version":109,"cve_count":11,"kev_count":11,"has_kev":16},{"version":111,"cve_count":11,"kev_count":11,"has_kev":16},{"version":113,"cve_count":11,"kev_count":11,"has_kev":16},{"version":115,"cve_count":11,"kev_count":11,"has_kev":16},{"version":117,"cve_count":11,"kev_count":11,"has_kev":16},{"version":119,"cve_count":11,"kev_count":11,"has_kev":16},{"version":121,"cve_count":11,"kev_count":11,"has_kev":16},{"version":123,"cve_count":11,"kev_count":11,"has_kev":16},{"version":125,"cve_count":11,"kev_count":11,"has_kev":16},{"version":127,"cve_count":11,"kev_count":11,"has_kev":16},{"version":129,"cve_count":95,"kev_count":11,"has_kev":16},{"version":131,"cve_count":95,"kev_count":11,"has_kev":16},{"version":133,"cve_count":11,"kev_count":11,"has_kev":16},{"version":135,"cve_count":11,"kev_count":11,"has_kev":16},[199,207,214,219,224,232,238,244,250,255],{"cveId":200,"description":201,"publishedDate":202,"cvssScore":203,"cvssVersion":204,"severity":205,"isKev":16,"epssScore":206},"CVE-2019-11328","An issue was discovered in Singularity 3.1.0 to 3.2.0-rc2, a malicious user with local\u002Fnetwork access to the host system (e.g. ssh) could exploit this vulnerability due to insecure permissions allowing a user to edit files within `\u002Frun\u002Fsingularity\u002Finstances\u002Fsing\u002F\u003Cuser>\u002F\u003Cinstance>`. The manipulation of those files can change the behavior of the starter-suid program when instances are joined resulting in potential privilege escalation on the host.","2019-05-14",8.8,"v3.1","High",0.02088,{"cveId":208,"description":209,"publishedDate":210,"cvssScore":211,"cvssVersion":204,"severity":212,"isKev":16,"epssScore":213},"CVE-2020-15229","Singularity (an open source container platform) from version 3.1.1 through 3.6.3 has a vulnerability. Due to insecure handling of path traversal and the lack of path sanitization within `unsquashfs`, it is possible to overwrite\u002Fcreate any files on the host filesystem during the extraction with a crafted squashfs filesystem. The extraction occurs automatically for unprivileged (either installation or with `allow setuid = no`) run of Singularity when a user attempt to run an image which is a local SIF image or a single file containing a squashfs filesystem and is coming from remote sources `library:\u002F\u002F` or `shub:\u002F\u002F`. Image build is also impacted in a more serious way as it can be used by a root user, allowing an attacker to overwrite\u002Fcreate files leading to a system compromise, so far bootstrap methods `library`, `shub` and `localimage` are triggering the squashfs extraction. This issue is addressed in Singularity 3.6.4. All users are advised to upgrade to 3.6.4 especially if they use Singularity mainly for building image as root user. There is no solid workaround except to temporary avoid to use unprivileged mode with single file images in favor of sandbox images instead. Regarding image build, temporary avoid to build from `library` and `shub` sources and as much as possible use `--fakeroot` or a VM for that.","2020-10-14",9.3,"Critical",0.02046,{"cveId":215,"description":216,"publishedDate":217,"cvssScore":203,"cvssVersion":204,"severity":205,"isKev":16,"epssScore":218},"CVE-2020-25040","Sylabs Singularity through 3.6.2 has Insecure Permissions on temporary directories used in explicit and implicit container build operations, a different vulnerability than CVE-2020-25039.","2020-09-16",0.0204,{"cveId":220,"description":221,"publishedDate":217,"cvssScore":222,"cvssVersion":204,"severity":205,"isKev":16,"epssScore":223},"CVE-2020-25039","Sylabs Singularity 3.2.0 through 3.6.2 has Insecure Permissions on temporary directories used in fakeroot or user namespace container execution.",8.1,0.02014,{"cveId":225,"description":226,"publishedDate":227,"cvssScore":228,"cvssVersion":229,"severity":230,"isKev":16,"epssScore":231},"CVE-2018-12021","Singularity 2.3.0 through 2.5.1 is affected by an incorrect access control on systems supporting overlay file system. When using the overlay option, a malicious user may access sensitive information by exploiting a few specific Singularity features.","2018-07-05",6.5,"v3.0","Medium",0.01596,{"cveId":233,"description":234,"publishedDate":235,"cvssScore":236,"cvssVersion":204,"severity":230,"isKev":16,"epssScore":237},"CVE-2021-32635","Singularity is an open source container platform. In verions 3.7.2 and 3.7.3, Dde to incorrect use of a default URL, `singularity` action commands (`run`\u002F`shell`\u002F`exec`) specifying a container using a `library:\u002F\u002F` URI will always attempt to retrieve the container from the default remote endpoint (`cloud.sylabs.io`) rather than the configured remote endpoint. An attacker may be able to push a malicious container to the default remote endpoint with a URI that is identical to the URI used by a victim with a non-default remote endpoint, thus executing the malicious container. Only action commands (`run`\u002F`shell`\u002F`exec`) against `library:\u002F\u002F` URIs are affected. Other commands such as `pull` \u002F `push` respect the configured remote endpoint. The vulnerability is patched in Singularity version 3.7.4. Two possible workarounds exist: Users can only interact with the default remote endpoint, or an installation can have an execution control list configured to restrict execution to containers signed with specific secure keys.","2021-05-28",6.3,0.01415,{"cveId":239,"description":240,"publishedDate":241,"cvssScore":242,"cvssVersion":204,"severity":205,"isKev":16,"epssScore":243},"CVE-2020-13846","Sylabs Singularity 3.5.0 through 3.5.3 fails to report an error in a Status Code.","2020-07-14",7.5,0.01336,{"cveId":245,"description":246,"publishedDate":247,"cvssScore":248,"cvssVersion":204,"severity":212,"isKev":16,"epssScore":249},"CVE-2021-33027","Sylabs Singularity Enterprise through 1.6.2 has Insufficient Entropy in a nonce.","2021-07-19",9.8,0.01289,{"cveId":251,"description":252,"publishedDate":253,"cvssScore":248,"cvssVersion":204,"severity":212,"isKev":16,"epssScore":254},"CVE-2021-33622","Sylabs Singularity 3.5.x and 3.6.x, and SingularityPRO before 3.5-8, has an Incorrect Check of a Function's Return Value.","2021-06-15",0.01258,{"cveId":256,"description":257,"publishedDate":258,"cvssScore":242,"cvssVersion":204,"severity":205,"isKev":16,"epssScore":259},"CVE-2019-19724","Insecure permissions (777) are set on $HOME\u002F.singularity when it is newly created by Singularity (version from 3.3.0 to 3.5.1), which could lead to an information leak, and malicious redirection of operations performed against Sylabs cloud services.","2019-12-18",0.01234,[],{"title":262,"metaDescription":263,"keywords":264,"structuredData":265},"Singularity by Sylabs - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Singularity by Sylabs covering 60 versions with 15 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Singularity vulnerabilities, Singularity security, Singularity CVE, Sylabs Singularity, Singularity threat intelligence, Sylabs security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":266,"@type":267,"name":268,"description":263,"url":269,"manufacturer":270,"applicationCategory":274,"softwareVersion":275,"mainEntity":276},"https:\u002F\u002Fschema.org","SoftwareApplication","Singularity","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsylabs\u002Fsingularity",{"@type":271,"name":272,"url":273},"Organization","Sylabs","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsylabs","Security Software","60 versions tracked",{"@type":277,"name":278,"description":279,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Singularity Security Vulnerabilities","Security vulnerabilities affecting Singularity by Sylabs",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":281,"apiVersion":282},"2026-10-19T00:53:27.454Z","3.0",{"rows":284,"total":11,"capped":16,"failed":11},[],[286,289],{"product":287,"cves":288},"singularity_image_format",2,{"product":290,"cves":95},"singularity_container_services_library"]