{"action":"Upgrade github.com/sylabs/singularity/v4 to 4.1.11 or later.","affected":[{"fixed":"4.3.5","introduced":"4.2.0-rc.1"},{"fixed":"4.1.11","introduced":"0"}],"component":"github.com/sylabs/singularity/v4","cve_ids":["CVE-2025-64750"],"ecosystem":"Go","epss":0.00172,"exploited":false,"fixed_versions":["4.3.5","4.1.11"],"ghsa_id":"GHSA-wwrx-w7c9-rf87","id":"tcs_01M5KFRA7RY6QFQ5X1KNV77ZFB","modified_at":"2026-02-04T04:21:29.220066Z","published_at":"2025-12-02T21:07:02Z","references":["https://osv.dev/vulnerability/GHSA-wwrx-w7c9-rf87","https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm","https://github.com/sylabs/singularity/security/advisories/GHSA-wwrx-w7c9-rf87","https://nvd.nist.gov/vuln/detail/CVE-2025-64750","https://github.com/sylabs/singularity/pull/3850","https://github.com/sylabs/singularity/commit/27882963879a7af1699fd6511c3f5f1371d80f33","https://github.com/sylabs/singularity/commit/5af3e790c40593591dfc26d0692e4d4b21c29ba0","https://github.com/advisories/GHSA-fh74-hm69-rqjw","https://github.com/sylabs/singularity","https://pkg.go.dev/vuln/GO-2025-4177"],"severity":{"label":"medium","score":4.5},"sources":[{"source":"osv","source_id":"GHSA-wwrx-w7c9-rf87","url":"https://osv.dev/vulnerability/GHSA-wwrx-w7c9-rf87"}],"summary":"Singluarity ineffectively applies selinux / apparmor LSM process labels"}