{"action":"Upgrade github.com/sylabs/singularity to 3.2.0 or later.","affected":[{"fixed":"3.2.0","introduced":"3.1.0"}],"component":"github.com/sylabs/singularity","cve_ids":["CVE-2019-11328"],"ecosystem":"Go","epss":0.02088,"exploited":false,"fixed_versions":["3.2.0"],"ghsa_id":"GHSA-557g-r22w-9wvx","id":"tcs_01M5KEXNGY9F44YNVEYGQ2AQZ6","modified_at":"2023-11-08T04:01:01.092123Z","published_at":"2021-12-20T18:25:33Z","references":["https://osv.dev/vulnerability/GHSA-557g-r22w-9wvx","https://nvd.nist.gov/vuln/detail/CVE-2019-11328","https://github.com/sylabs/singularity/commit/618c9d56802399adb329c23ea2b70598eaff4a31","https://github.com/sylabs/singularity/releases/tag/v3.2.0","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5O3TPL5OOTIZEI4H6IQBCCISBARJ6WL3","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LIHV7DSEVTB5SUPEZ2UXGS3Q6WMEQSO2","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNU5BUHFOTYUZVHFUSX2VG4S3RCPUEMA","http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00028.html","http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00059.html","http://www.openwall.com/lists/oss-security/2019/05/16/1","http://www.securityfocus.com/bid/108360"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-557g-r22w-9wvx","url":"https://osv.dev/vulnerability/GHSA-557g-r22w-9wvx"}],"summary":"Incorrect Permission Assignment for Critical Resource in Singularity"}