Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-29136
5.5
MEDIUMCVSS v3
Published
April 6, 2021
CVSS v2
2.1 LOW
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Open Container Initiative umoci before 0.4.7 allows attackers to overwrite arbitrary host paths via a crafted image that causes symlink traversal when "umoci unpack" or "umoci raw unpack" is used.
sylabs/singularity
GitHubSingularityCE is the Community Edition of Singularity, an open source container platform designed to be simple, fast, and secure.
GitHubSingularityCE is the Community Edition of Singularity, an open source container platform designed to be simple, fast, and secure.< 3.7.3NVD