VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/hpcng/singularity: vulnerability history, versions and safety

github.com/hpcng/singularity is a package in the Go ecosystem. Vulert records 2 vulnerabilities for it across 0 release, from Jun 2021 to May 2022. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
2 vulnerabilities recorded M2
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/hpcng/singularity vulnerabilities

Vulert verdict on github.com/hpcng/singularity v3.1.1+incompatible i

Updated on 22 Oct 2026

Every vulnerability Vulert records for this package has a fix, and the newest was recorded 14 May 2022. Apply the fixes listed below and you are clear.

Package health score 72/100
  • Security Minor issues
  • Maintenance Maintaining
  • Popularity Key ecosystem project
  • Community Quiet

What to do: Move the affected dependencies to the fixed versions listed below, then keep the package monitored so the next vulnerability reaches you. Fix it, then keep watch: Vulert alerts you when a new vulnerability affects the version you run. Monitor it with Vulert →

  • Current release v3.1.1+incompatible — unaffected i
  • Vulnerabilities on record 2 over 1 year · 0 in the last year i
  • Latest disclosure 14 May 2022 i
  • Highest CVSS 6.5 i
  • With no published fix 0 i
  • Stars 2,625 i
  • OpenSSF scorecard 2/10 i
  • Last release 48 months ago i
  • Licence BSD-3-Clause i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/hpcng/singularity, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.0.0-20221010175028-9dceb4240c12 10 Oct 2022 none BSD-3-Clause — Details →
v0.0.0-20220303154750-898e91ab59e0 03 Mar 2022 none BSD-3-Clause — Details →
v0.0.0-20220303153718-a8a87c283896 03 Mar 2022 none BSD-3-Clause — Details →
v0.0.0-20220301223848-64041754b5a8 01 Mar 2022 none BSD-3-Clause — Details →
v0.0.0-20211203182850-2f16701e33f5 03 Dec 2021 none BSD-3-Clause — Details →
v0.0.0-20211203181525-022ccb8e1207 03 Dec 2021 none BSD-3-Clause — Details →
v0.0.0-20211130222637-32de82cd3fe1 30 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211130212052-14f9b28932a0 30 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211130142100-e6435db1783d 30 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211127152351-384f570e0b89 27 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211127145544-ed6a01199854 27 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211127145543-190ff0642526 27 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211127145541-1f59b8ca3964 27 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211127145538-cb9de1f0d28e 27 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211127145332-679283181e46 27 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211127144309-d0f0882d510b 27 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211127143952-09dd555718d1 27 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211125111143-0ea5691e56fb 25 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211119213143-99aa7f1415a0 19 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211119213029-5990afeb2277 19 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211118052240-232d2579e42c 18 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211118052219-5e7ce75ea473 18 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211117175750-ccc3cac34435 17 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211117165015-c0b68648ff94 17 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211117122108-2f5ae2779877 17 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211116162501-f68a4cb3baaf 16 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211116161924-dca65113dfb4 16 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211116144536-9a037421edfb 16 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211116144536-f9eef16b479d 16 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211116123050-464be983b576 16 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211116123017-fdf1496bf132 16 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211115182033-7915a504f740 15 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211115182033-d151a8f0edbf 15 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211115181316-095ab698fc31 15 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211115181316-66ea4de52fe9 15 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211112220649-ac4ea80b43ee 12 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211112220213-4c45a965be68 12 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211112215246-f0547f69a327 12 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211112205140-fb46d06e9160 12 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211112171846-25d05c534bc8 12 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211112163314-57f5b34c49db 12 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211112162655-d18e43a696c3 12 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211112162653-de28a42f77b5 12 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211112162650-6453190973f1 12 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211111165025-303d405d047a 11 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211111164921-5b7e41bd9206 11 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211111164842-0bfe4c6c9114 11 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211111163840-db722193fbce 11 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211111112856-5e053ef0f007 11 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211110110835-07fcc560107d 10 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211110110820-78442de394ff 10 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211110110820-a1e78baa8c12 10 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211110110819-a8896d9f937c 10 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211110110743-93a3ab358c84 10 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211109193904-0dd0bf00d2dd 09 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211109193849-4e1e1f9e2ded 09 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211109191310-bafb290c9ca8 09 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211109191309-a6424c122100 09 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211109191308-639e5e87f002 09 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211109191307-51c934c8cb5f 09 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211109191306-d27ff7a6f5aa 09 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211109191305-c515be0bf4aa 09 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211109191304-5344b137aba1 09 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211109190111-8e9ecfc49dad 09 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211109165448-ad02fd190ac4 09 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211109145724-82094d91900c 09 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211109144054-546088e8d54d 09 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211109143526-3300b201bfd8 09 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211109143443-c5f3cda492f5 09 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211109143335-3a2a415759b8 09 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211109143302-eb48e254a2f2 09 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211109143230-a5d6fa661d33 09 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211109132016-87847f6c8ff3 09 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211109083950-6db36af97d8f 09 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211109083950-a361ec94062c 09 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211109083950-a9c9855a0e31 09 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211109080205-767dfa08e251 09 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211109075154-548c6093eb2f 09 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211109075154-618e8fac3f46 09 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211109075154-94392c27538f 09 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211109075154-9b1817a0ad3d 09 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211109075154-da7e74b1faa3 09 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211109075154-e6ea561cf26e 09 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211109075154-ee5a57f95b62 09 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211108211629-b85aad2f0946 08 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211108191856-9736d224b450 08 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211108173524-772498d91c78 08 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211108173501-02093ce601b9 08 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211108172431-1e572c2a46c9 08 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211108163709-33f83684070f 08 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211108163652-72ca9d7b6ca1 08 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211108163501-5cc847934cdd 08 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211108161931-6c1f78572c09 08 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211108155724-64ad04e5810e 08 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211108121753-fd0145b0e6f6 08 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211108104933-0ea3f86665cd 08 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211108071006-1fdcd1a25d26 08 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211105163447-aede91a8cc29 05 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211105163348-38076ac87b90 05 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211104191910-069988e44753 04 Nov 2021 none BSD-3-Clause — Details →
v0.0.0-20211104181234-70fa2943e5fb 04 Nov 2021 none — — Details →
v0.0.0-20211104181021-f366c135b931 04 Nov 2021 none — — Details →
v0.0.0-20211103153704-5db11fa45732 03 Nov 2021 none — — Details →
v0.0.0-20211103105500-b9d1d0e397d5 03 Nov 2021 none — — Details →
v0.0.0-20211103101520-d6aacf08b238 03 Nov 2021 none — — Details →
v0.0.0-20211103083123-b66377ceb132 03 Nov 2021 none — — Details →
v0.0.0-20211103082937-785be676332d 03 Nov 2021 none — — Details →
v0.0.0-20211102210810-35da8d3c250d 02 Nov 2021 none — — Details →
v0.0.0-20211102210700-8aab87ad87b5 02 Nov 2021 none — — Details →
v0.0.0-20211102200604-134fea1f0992 02 Nov 2021 none — — Details →
v0.0.0-20211102183447-7b7d62780785 02 Nov 2021 none — — Details →
v0.0.0-20211101143930-3b579e2992f1 01 Nov 2021 none — — Details →
v0.0.0-20211101131558-b694db7b210f 01 Nov 2021 none — — Details →
v0.0.0-20211029184331-5482ae07abde 29 Oct 2021 none — — Details →
v0.0.0-20211029154943-50b08f167775 29 Oct 2021 none — — Details →
v0.0.0-20211029154727-756ec8717355 29 Oct 2021 none — — Details →
v0.0.0-20211028223549-7dc244529038 28 Oct 2021 none — — Details →
v0.0.0-20211028214902-520d94a70a81 28 Oct 2021 none — — Details →
v0.0.0-20211028201754-6ff846bbe1a5 28 Oct 2021 none — — Details →
v0.0.0-20211028124211-494dd00f2c78 28 Oct 2021 none — — Details →

The newest 120 of 7,518 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2021 1
  • 2022 1

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 2 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/hpcng/singularity

The 2 most severe of 2 vulnerabilities recorded for this package

Search all 2 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2018-12021: Singularity Incorrect Access Control 6.5 medium 2.5.2 14 May 2022
Vulnerability in Singularity Package: Action Commands Against Library URIs Ignore Configured Remote Endpoint 6.3 medium 3.7.4 01 Jun 2021

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 22/Oct/2026 · Vulnerabilities in our DB: 524173

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/hpcng/singularity

Is github.com/hpcng/singularity safe to use?

Vulert records 2 vulnerabilities for github.com/hpcng/singularity in Go: 0 critical, 0 high, 2 medium and 0 low. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/hpcng/singularity's Vulert package health score?

Vulert scores github.com/hpcng/singularity 72/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Which version of github.com/hpcng/singularity should I use?

v3.1.1+incompatible is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/hpcng/singularity have?

2 vulnerabilities are recorded for github.com/hpcng/singularity in the Go ecosystem: 0 critical, 0 high, 2 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/hpcng/singularity vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/hpcng/singularity in the last 12 months, and the oldest entry in this database dates to 01 Jun 2021. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/hpcng/singularity are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/hpcng/singularity for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/hpcng/singularity version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.