{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"github.com/sylabs/singularity/v4","cve_ids":["CVE-2025-64750"],"ecosystem":"Go","epss":0.0016,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-wwrx-w7c9-rf87","id":"tcs_01M5KGC2YFG7GCB6N8GC1QF77H","modified_at":"2026-03-03T04:57:44.379700Z","published_at":"2025-12-08T21:31:36Z","references":["https://osv.dev/vulnerability/GO-2025-4177","https://github.com/sylabs/singularity/security/advisories/GHSA-wwrx-w7c9-rf87","https://nvd.nist.gov/vuln/detail/CVE-2025-64750","https://github.com/sylabs/singularity/commit/27882963879a7af1699fd6511c3f5f1371d80f33","https://github.com/sylabs/singularity/commit/5af3e790c40593591dfc26d0692e4d4b21c29ba0","https://github.com/sylabs/singularity/pull/3850","https://github.com/advisories/GHSA-fh74-hm69-rqjw","https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm"],"severity":{"label":"medium","score":4.5},"sources":[{"source":"osv","source_id":"GO-2025-4177#Go/github.com/sylabs/singularity/v4","url":"https://osv.dev/vulnerability/GO-2025-4177"},{"source":"nvd","source_id":"CVE-2025-64750","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-64750"}],"summary":"Singularity ineffectively applies of selinux / apparmor LSM process labels in github.com/sylabs/singularity"}