Singularitypro
Approved changes feed: RSS · Atom
cpe:2.3:a:sylabs:singularitypro:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Sylabs (550e3deb-05dd-5626-b7da-51eb3e4162e6) |
|---|---|
| Product | Singularitypro (7e8caa0b-3cd7-5801-9ea9-a5dfa8b9a90b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/sylabs/singularity |
purl2cpe | 2026-06-01 10:12:59.588117 |
pkg:golang/github.com/sylabs/singularity |
purl2cpe | 2026-06-01 10:12:59.588119 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-47215 |
vulnerable | 2026-09-16 04:34:01.275992 |
Singularity: Incorrect path matching for 'limit container paths' directive
MEDIUM (4.8)
SingularityCE and SingularityPRO are open source container platforms. Prior to SingularityCE 4.4.2 and SingularityPRO 4.3.9 and 4.1.14, incorrect path-string matching in the singularity.conf limit container paths directive allows a container in a sibling directory such as /data/safe-but-unsafe to be run when /data/safe is allowed under setuid mode. This permits a user to run a container from outside the administrator's configured path allowlist. Installations that do not use limit container paths are not affected. This issue is fixed in SingularityCE 4.4.2 and SingularityPRO 4.3.9 and 4.1.14.
Published: 2026-09-15T15:07:49.642Z
Updated: 2026-09-15T18:02:51.510Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33622 |
vulnerable | 2026-06-08 05:32:11.892558 |
Details available
Sylabs Singularity 3.5.x and 3.6.x, and SingularityPRO before 3.5-8, has an Incorrect Check of a Function's Return Value.
Published: 2021-06-15T18:59:24.000Z
Updated: 2024-08-03T23:58:21.532Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.