Sylabs vulnerabilities
We track 3 vulnerabilities in Sylabs products across 5 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on April 25, 2023.
Latest Sylabs vulnerabilities
- 7.8 High severity
apptainer: Use After Free
Apptainer is an open source container platform for Linux. There is an ext4 use-after-free flaw that is exploitable through versions of Apptainer < 1.1.0 and installations that include apptainer-suid < 1.1.8 on older operating systems where that CVE has not bee
- 7.6 High severity
scs-library-client: Insufficiently Protected Credentials
github.com/sylabs/scs-library-client is the Go client for the Singularity Container Services (SCS) Container Library Service. When the scs-library-client is used to pull a container image, with authentication, the HTTP Authorization header sent by the client t
- 9.8 Critical severity
sif: Use of a Broken or Risky Cryptographic Algorithm
syslabs/sif is the Singularity Image Format (SIF) reference implementation. In versions prior to 2.8.1the `github.com/sylabs/sif/v2/pkg/integrity` package did not verify that the hash algorithm(s) used are cryptographically secure when verifying digital signat