Known vulnerabilities in singularity (Alpine package)

Vendor: Alpine Linux Development Team
Software: singularity (Alpine package)
Software CPE: cpe:2.3:o:alpine:singularity_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting singularity (Alpine package) singularity (Alpine package) is affected by 7 known vulnerabilities: 4 medium, 3 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU47646 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-15229		 CWE-22 Medium
No
No
 3.6.4-r0 14.10.2020 SB2020101409
SB2020103001
SB2020103002
and 2 more
#VU47112 - Incorrect Default Permissions
CVE-2020-25040		 CWE-276 Low
No
No
 3.6.3-r0 16.09.2020 SB2020092514
SB2020092515
SB2020092516
and 1 more
#VU47113 - Incorrect Default Permissions
CVE-2020-25039		 CWE-276 Low
No
No
 3.6.3-r0 16.09.2020 SB2020092514
SB2020092515
SB2020092516
and 1 more
#VU31793 - Incorrect Default Permissions
CVE-2019-19724		 CWE-276 Low
No
No
 3.5.2-r0 23.07.2020 SB2019121841
SB2020072402
SB20200114116
and 1 more
#VU31718 - Improper Validation of Integrity Check Value
CVE-2020-13847		 CWE-354 Medium
No
No
 3.6.2-r0 21.07.2020 SB2020072110
SB2020072111
SB2020072402
and 2 more
#VU31717 - Improper input validation
CVE-2020-13846		 CWE-20 Medium
No
No
 3.6.2-r0 21.07.2020 SB2020072110
SB2020072111
SB2020072402
and 2 more
#VU31716 - Improper Verification of Cryptographic Signature
CVE-2020-13845		 CWE-347 Medium
No
No
 3.6.2-r0 21.07.2020 SB2020072110
SB2020072111
SB2020072402
and 2 more