sylabs

Products

ProductCVEsExploitedLatest
singularity3–Sep 15, 2026
sif2–Oct 6, 2022
scs-library-client1–Jan 17, 2023
SingularityPRO1–Sep 15, 2026

Exploited and recent CVEs

  • CVE-2026-47215 Medium 4.8 Singularity: Incorrect path matching for 'limit container paths' directive 0.2%
  • CVE-2026-47215 Medium 4.8 Singularity: Incorrect path matching for 'limit container paths' directive 0.2%
  • CVE-2025-64750 Medium 4.5 Singluarity ineffectively applies of selinux / apparmor LSM process labels 0.2%
  • CVE-2022-23538 Medium 5.2 User credentials leaked to third-party service via HTTP redirect in scs-library-client 0.7%
  • CVE-2022-39237 Medium 6.3 Digital Signature Hash Algorithms Not Validated in sylabs/sif 0.7%
  • CVE-2021-32635 Medium 6.3 Action Commands (run/shell/exec) Against Library URIs Ignore Configured Remote Endpoint 1.4%
  • CVE-2021-29499 High 7.5 Predictable SIF UUID Identifiers 1.0%