2.4.3.1

DATE	CVE	VULNERABILITY TITLE	RISK
2021-04-06	CVE-2021-29136	Improper Input Validation vulnerability in multiple products Open Container Initiative umoci before 0.4.7 allows attackers to overwrite arbitrary host paths via a crafted image that causes symlink traversal when "umoci unpack" or "umoci raw unpack" is used. local low complexity linuxfoundation sylabs CWE-20	2.1
2020-09-16	CVE-2020-25040	Incorrect Permission Assignment for Critical Resource vulnerability in multiple products Sylabs Singularity through 3.6.2 has Insecure Permissions on temporary directories used in explicit and implicit container build operations, a different vulnerability than CVE-2020-25039. network low complexity sylabs opensuse CWE-732	6.5
2018-12-17	CVE-2018-19295	Improper Input Validation vulnerability in Sylabs Singularity Sylabs Singularity 2.4 to 2.6 allows local users to conduct Improper Input Validation attacks. local low complexity sylabs CWE-20	7.2
2018-07-05	CVE-2018-12021	Information Exposure vulnerability in Sylabs Singularity Singularity 2.3.0 through 2.5.1 is affected by an incorrect access control on systems supporting overlay file system. network low complexity sylabs CWE-200	6.8