Go/github.com/sylabs/singularity/v4 CVE-2025-64750: medium 4.5, EPSS 0.16%
Singularity ineffectively applies of selinux / apparmor LSM process labels in github.com/sylabs/singularity
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2025-4177#Go/github.com/sylabs/singularity/v4
- nvd: CVE-2025-64750
- https://github.com/sylabs/singularity/security/advisories/GHSA-wwrx-w7c9-rf87
- https://github.com/sylabs/singularity/commit/27882963879a7af1699fd6511c3f5f1371d80f33
- https://github.com/sylabs/singularity/commit/5af3e790c40593591dfc26d0692e4d4b21c29ba0
- https://github.com/sylabs/singularity/pull/3850
- https://github.com/advisories/GHSA-fh74-hm69-rqjw
- https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm
CVE-2025-64750 · published · modified · JSON