s
sylabs
Security Risk Profile
66
/100
highSecurity Risk Score
Comprehensive risk assessment based on 18 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 5, 2018 to present
18
Total CVEs
15
Critical+High
0
Exploited
7
Unpatched
Threat Assessment
Avg CVSS
8
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
7
Critical/High
Risk Level
66/100
high
Severity Distribution
Critical
5High
10Medium
3Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Input Validation
3
2
Use After Free
1
3
Buffer Overflow
1
4
Path Traversal
1
5
Infoleak
1
Most Affected Products
1. Sylabs Singularity22
2. openSUSE Leap7
3. Sylabs Singularity Container Services Library4
4. go/github.com/sylabs/singularity3
5. Fedoraproject Fedora3
Recent Vulnerabilities
See more →CVE-2023-30549
CVSS 7.8high
Unpatched extfs vulnerabilities are exploitable through suid-mode Apptainer
Apr 25, 2023
CVE-2022-23538
CVSS 7.6high
User credentials leaked to third-party service via HTTP redirect in scs-library-client
Jan 17, 2023
CVE-2022-39237
CVSS 9.8critical
Digital Signature Hash Algorithms Not Validated in sylabs/sif
Oct 6, 2022
CVE-2021-33027
CVSS 9.8critical
Jul 19, 2021🔧 No Patch
CVE-2021-33622
CVSS 9.8critical
Jun 15, 2021🔧 No Patch
CVE-2021-32635
CVSS 6.8medium
Action Commands (run/shell/exec) Against Library URIs Ignore Configured Remote Endpoint
May 28, 2021🔧 No Patch
CVE-2021-29499
CVSS 7.5high
Predictable SIF UUID Identifiers
May 7, 2021🔧 No Patch
CVE-2021-29136
CVSS 5.5medium
Apr 6, 2021
CVE-2020-15229
CVSS 9.3critical
Path traversal and files overwrite with unsquashfs
Oct 14, 2020
CVE-2020-25040
CVSS 8.8high
Sep 16, 2020🔧 No Patch
Monitor sylabs in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.