Go/github.com/sylabs/singularity/v4 CVE-2026-47215: medium 4.8, EPSS 0.15%

Singluarity: Incorrect path matching for 'limit container paths' directive

Action: Upgrade github.com/sylabs/singularity/v4 to 4.4.2 or later.

go get github.com/sylabs/singularity/v4@v4.4.2

Affected

Fixed versions

Sources

• osv: GHSA-wqcr-7rf3-f64m
• https://github.com/sylabs/singularity/security/advisories/GHSA-wqcr-7rf3-f64m
• https://github.com/sylabs/singularity/commit/c08791793e843d4c9c1f2fc1d9d12abef747378f
• https://docs.sylabs.io/guides/latest/admin-guide/configfiles.html#limiting-container-execution
• https://github.com/sylabs/singularity
• https://github.com/sylabs/singularity/releases/tag/v4.4.2

CVE-2026-47215 · published 2026-06-04T17:38:21Z · modified 2026-06-25T23:11:43.816610101Z · JSON