{"action":"Upgrade github.com/sylabs/singularity to 3.5.2 or later.","affected":[{"fixed":"3.5.2","introduced":"3.3.0"}],"component":"github.com/sylabs/singularity","cve_ids":["CVE-2019-19724"],"ecosystem":"Go","epss":0.01234,"exploited":false,"fixed_versions":["3.5.2"],"ghsa_id":"GHSA-mj73-5x75-9phh","id":"tcs_01M5KFFZCGE97NPWQCQ4JBW0WV","modified_at":"2023-11-08T04:01:29.285393Z","published_at":"2022-05-24T17:04:02Z","references":["https://osv.dev/vulnerability/GHSA-mj73-5x75-9phh","https://nvd.nist.gov/vuln/detail/CVE-2019-19724","https://github.com/sylabs/singularity/commit/2cda4981812c29f0fb11d3ea6aaf6139f665a631","https://github.com/sylabs/singularity","https://github.com/sylabs/singularity/releases/tag/v3.5.2","http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00025.html","http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00059.html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-mj73-5x75-9phh","url":"https://osv.dev/vulnerability/GHSA-mj73-5x75-9phh"}],"summary":"Singularity insecure permissions"}