Executive brief
"Verify All" Returns Success Despite Validation Failures in Singularity
Affected products
- Go github.com/sylabs/singularity
Junglewise Threat Intelligence
CVE-2020-13846: "Verify All" Returns Success Despite Validation Failures in Singularity
CVE-2020-13846 · Severity: low · CVSS 3.1 · Published 2021-12-20
Technologies: github.com/sylabs/singularity (Go). Vendors: Go.
Related threats
- SingularityCE and SingularityPRO are open source container platforms. Prior to SingularityCE 4.4.2 and SingularityPRO 4.3.9 and 4.1.14, inco
- GO-2025-4177 - Singularity ineffectively applies of selinux / apparmor LSM process labels in github.com/sylabs/singularity
- Singularity insecure permissions
- Sylabs Singularity Improper Input Validation
- Insecure permissions on user namespace / fakeroot temporary rootfs in Singularity