{"action":"Upgrade github.com/sylabs/singularity to 2.6.1 or later.","affected":[{"fixed":"2.6.1","introduced":"2.4.0"}],"component":"github.com/sylabs/singularity","cve_ids":["CVE-2018-19295"],"ecosystem":"Go","epss":0.0047,"exploited":false,"fixed_versions":["2.6.1"],"ghsa_id":"GHSA-p83v-8vmr-qfv9","id":"tcs_01M5KFH4G7ERQH23XTPT4ZM520","modified_at":"2023-11-08T04:00:07.389859Z","published_at":"2022-05-14T01:39:14Z","references":["https://osv.dev/vulnerability/GHSA-p83v-8vmr-qfv9","https://nvd.nist.gov/vuln/detail/CVE-2018-19295","https://github.com/sylabs/singularity/commit/9103f0155259fdf1159277bca3c2d347571cba0d","https://github.com/sylabs/singularity","https://github.com/sylabs/singularity/releases/tag/2.6.1"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-p83v-8vmr-qfv9","url":"https://osv.dev/vulnerability/GHSA-p83v-8vmr-qfv9"}],"summary":"Sylabs Singularity Improper Input Validation"}