{"action":"Upgrade github.com/sylabs/singularity to 3.6.4 or later.","affected":[{"fixed":"3.6.4","introduced":"3.1.1"}],"component":"github.com/sylabs/singularity","cve_ids":["CVE-2020-15229"],"ecosystem":"Go","epss":0.02046,"exploited":false,"fixed_versions":["3.6.4"],"ghsa_id":"GHSA-7gcp-w6ww-2xv9","id":"tcs_01M5KF1YRMBXJETFYMKCXZD6V8","modified_at":"2026-09-10T03:49:04.743871790Z","published_at":"2021-05-24T16:59:53Z","references":["https://osv.dev/vulnerability/GHSA-7gcp-w6ww-2xv9","https://github.com/hpcng/singularity/security/advisories/GHSA-7gcp-w6ww-2xv9","https://nvd.nist.gov/vuln/detail/CVE-2020-15229","https://github.com/hpcng/singularity/pull/5611","https://github.com/hpcng/singularity/commit/eba3dea260b117198fdb6faf41f2482ab2f8d53e","https://github.com/hpcng/singularity/blob/v3.6.4/CHANGELOG.md#security-related-fixes","http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00070.html","http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00071.html","http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00009.html"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-7gcp-w6ww-2xv9","url":"https://osv.dev/vulnerability/GHSA-7gcp-w6ww-2xv9"}],"summary":"Path traversal and files overwrite with unsquashfs in singularity"}