VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/sylabs/singularity/v4: vulnerability history, versions and safety

github.com/sylabs/singularity/v4 is a package in the Go ecosystem. Vulert records 2 vulnerabilities for it across 120 releases, from Dec 2025 to Jun 2026. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
2 vulnerabilities recorded M2
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
2 in the last 12 months

Most recent disclosure 04 Jun 2026.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/sylabs/singularity/v4 vulnerabilities

Vulert verdict on github.com/sylabs/singularity/v4 v4.6.0 i

Updated on 23 Oct 2026

Action needed: v4.6.0 has 1 known vulnerability, but every one of them has a fix. Upgrade to the version listed below and you are clear.

Package health score 76/100
  • Security Minor issues
  • Maintenance Sustainable
  • Popularity Widely used
  • Community Quiet

What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →

  • Current release v4.6.0 — affected i
  • Vulnerabilities on record 2 over 1 year · 2 in the last year i
  • Latest disclosure 04 Jun 2026 i
  • Highest CVSS 4.8 i
  • With no published fix 0 i
  • Stars 996 i
  • OpenSSF scorecard 3/10 i
  • Last release this month i
  • Licence BSD-3-Clause i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/sylabs/singularity/v4, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v4.6.0 05 Oct 2026 M1 BSD-3-Clause Yes Details →
v4.5.1-0.20260911151835-ed07198d9798 11 Sep 2026 M1 BSD-3-Clause Yes Details →
v4.5.1-0.20260907160043-69931f833a62 07 Sep 2026 M1 BSD-3-Clause Yes Details →
v4.5.1-0.20260903151338-ea073962d366 03 Sep 2026 M1 BSD-3-Clause Yes Details →
v4.5.1-0.20260824120238-82d3d16db72a 24 Aug 2026 M1 BSD-3-Clause Yes Details →
v4.5.1 20 Aug 2026 M1 BSD-3-Clause Yes Details →
v4.5.1-rc.2 20 Aug 2026 M1 BSD-3-Clause Yes Details →
v4.5.1-rc.1 20 Aug 2026 M1 BSD-3-Clause Yes Details →
v4.5.1-0.20260819134041-aad69157dd6c 19 Aug 2026 M1 BSD-3-Clause Yes Details →
v4.5.1-0.20260812152344-b9334a97cbce 12 Aug 2026 M1 BSD-3-Clause Yes Details →
v4.5.1-0.20260730102817-b0cdc99f7590 30 Jul 2026 M1 BSD-3-Clause Yes Details →
v4.5.1-0.20260716121139-11e97ee4347a 16 Jul 2026 M1 BSD-3-Clause Yes Details →
v4.5.0 25 Jun 2026 M1 BSD-3-Clause Yes Details →
v4.4.1-0.20260622151829-e1a31b5c8391 22 Jun 2026 M1 BSD-3-Clause Yes Details →
v4.4.1-0.20260604161316-60cfba98b39e 04 Jun 2026 M1 BSD-3-Clause Yes Details →
v4.4.2 04 Jun 2026 M1 BSD-3-Clause Yes Details →
v4.4.1-0.20260323162512-97e76463276c 23 Mar 2026 M1 BSD-3-Clause Yes Details →
v4.4.1 23 Mar 2026 M1 BSD-3-Clause Yes Details →
v4.4.0 26 Feb 2026 M1 BSD-3-Clause Yes Details →
v4.3.7 16 Jan 2026 M1 BSD-3-Clause Yes Details →
v4.3.1-0.20260116131728-1db04282bf12 16 Jan 2026 M1 BSD-3-Clause Yes Details →
v4.3.6 16 Dec 2025 M1 BSD-3-Clause Yes Details →
v4.3.1-0.20251215140847-95f0ce19fbd8 15 Dec 2025 M1 BSD-3-Clause Yes Details →
v4.3.1-0.20251202181746-a0a974f200b5 02 Dec 2025 M1 BSD-3-Clause Yes Details →
v4.3.5 02 Dec 2025 M1 BSD-3-Clause Yes Details →
v4.3.1-0.20251202111830-27882963879a 02 Dec 2025 M1 BSD-3-Clause Yes Details →
v4.3.1-0.20251202111830-5af3e790c405 02 Dec 2025 M1 BSD-3-Clause Yes Details →
v4.3.1-0.20251113124736-e907ead23815 13 Nov 2025 M1 BSD-3-Clause Yes Details →
v4.3.1-0.20251111154635-52b74e59f059 11 Nov 2025 M1 BSD-3-Clause Yes Details →
v4.3.1-0.20251107145106-83b256048fdc 07 Nov 2025 M1 BSD-3-Clause Yes Details →
v4.3.1-0.20251015160259-387227557921 15 Oct 2025 M1 BSD-3-Clause Yes Details →
v4.3.4 14 Oct 2025 M1 BSD-3-Clause Yes Details →
v4.3.1-0.20250822084721-b9693ef1fe89 22 Aug 2025 M1 BSD-3-Clause Yes Details →
v4.3.3 19 Aug 2025 M1 BSD-3-Clause Yes Details →
v4.3.1-0.20250624084303-452005426e83 24 Jun 2025 M1 BSD-3-Clause Yes Details →
v4.3.2 18 Jun 2025 M1 BSD-3-Clause Yes Details →
v4.3.1 11 Apr 2025 M1 BSD-3-Clause Yes Details →
v4.3.1-0.20250411091428-12f093ef1724 11 Apr 2025 M1 BSD-3-Clause Yes Details →
v4.3.0 13 Mar 2025 M1 BSD-3-Clause Yes Details →
v4.3.0-rc.1.0.20250313120746-d482b292126d 13 Mar 2025 M1 BSD-3-Clause Yes Details →
v4.3.0-rc.1.0.20250304152147-762e87b10515 04 Mar 2025 M1 BSD-3-Clause Yes Details →
v4.3.0-rc.1 04 Mar 2025 M1 BSD-3-Clause Yes Details →
v4.2.0-rc.1.0.20250220135520-616795824324 20 Feb 2025 M1 BSD-3-Clause Yes Details →
v4.2.0-rc.1.0.20250213152716-1c851ae1bdd3 13 Feb 2025 M1 BSD-3-Clause Yes Details →
v4.2.0-rc.1.0.20241220175648-fa8cf285772a 20 Dec 2024 M1 BSD-3-Clause Yes Details →
v4.2.2 20 Dec 2024 M1 BSD-3-Clause Yes Details →
v4.2.0-rc.1.0.20241206093018-fec8f6ad2d3f 06 Dec 2024 M1 BSD-3-Clause Yes Details →
v4.2.0-rc.1.0.20241128161306-d39154d932f1 28 Nov 2024 M1 BSD-3-Clause Yes Details →
v4.2.0-rc.1.0.20241122093038-d86359aab970 22 Nov 2024 M1 BSD-3-Clause Yes Details →
v4.2.0-rc.1.0.20241120142616-5422be40654a 20 Nov 2024 M1 BSD-3-Clause Yes Details →
v4.2.0-rc.1.0.20241115145951-40ad7e2ca2e0 15 Nov 2024 M1 BSD-3-Clause Yes Details →
v4.2.0-rc.1.0.20241108102938-788e8d41d80f 08 Nov 2024 M1 BSD-3-Clause Yes Details →
v4.2.1 13 Sep 2024 M1 BSD-3-Clause Yes Details →
v4.2.0-rc.1.0.20240913144117-8b2455a611a6 13 Sep 2024 M1 BSD-3-Clause Yes Details →
v4.2.0-rc.1.0.20240906130754-21d524eaf169 06 Sep 2024 M1 BSD-3-Clause Yes Details →
v4.2.0-rc.1.0.20240905095215-170ebb7171a9 05 Sep 2024 M1 BSD-3-Clause Yes Details →
v4.2.0 04 Sep 2024 M1 BSD-3-Clause Yes Details →
v4.2.0-rc.1.0.20240904133529-485dc27a5cb3 04 Sep 2024 M1 BSD-3-Clause Yes Details →
v4.2.0-rc.1.0.20240903095447-c9ff652ffc2d 03 Sep 2024 M1 BSD-3-Clause Yes Details →
v4.2.0-rc.1.0.20240821132026-07ad13bef27a 21 Aug 2024 M1 BSD-3-Clause Yes Details →
v4.2.0-rc.1.0.20240814155357-0bf06a290ad9 14 Aug 2024 M1 BSD-3-Clause Yes Details →
v4.1.5 14 Aug 2024 M1 BSD-3-Clause Yes Details →
v4.2.0-rc.1 13 Aug 2024 M1 BSD-3-Clause Yes Details →
v4.1.0-rc.1.0.20240712155824-e82087f741e5 12 Jul 2024 M1 BSD-3-Clause Yes Details →
v4.1.0-rc.1.0.20240703144403-f8cc3695558c 03 Jul 2024 M1 BSD-3-Clause Yes Details →
v4.1.0-rc.1.0.20240701154025-cfe129ee7418 01 Jul 2024 M1 BSD-3-Clause Yes Details →
v4.1.4 28 Jun 2024 M1 BSD-3-Clause Yes Details →
v4.1.0-rc.1.0.20240523150110-731466791aa6 23 May 2024 M1 BSD-3-Clause Yes Details →
v4.1.0-rc.1.0.20240517113714-42b51c508c8d 17 May 2024 M1 BSD-3-Clause Yes Details →
v4.1.0-rc.1.0.20240510150045-1c7a36da73df 10 May 2024 M1 BSD-3-Clause Yes Details →
v4.1.3 08 May 2024 M1 BSD-3-Clause Yes Details →
v4.1.0-rc.1.0.20240315150803-c3223beaaef1 15 Mar 2024 M1 BSD-3-Clause Yes Details →
v4.1.0-rc.1.0.20240306102145-ac6b80433ff4 06 Mar 2024 M1 BSD-3-Clause Yes Details →
v4.1.2 05 Mar 2024 M1 BSD-3-Clause Yes Details →
v4.1.0-rc.1.0.20240216153719-e9d046abc08b 16 Feb 2024 M1 BSD-3-Clause Yes Details →
v4.1.0-rc.1.0.20240208121518-b80afd5685fe 08 Feb 2024 M1 BSD-3-Clause Yes Details →
v4.1.0-rc.1.0.20240201121237-bce2b9a1a73d 01 Feb 2024 M1 BSD-3-Clause Yes Details →
v4.1.1 01 Feb 2024 M1 BSD-3-Clause Yes Details →
v4.1.0-rc.1.0.20240129164411-19069efb036b 29 Jan 2024 M1 BSD-3-Clause Yes Details →
v4.1.0-rc.1.0.20240125155717-90701602f26e 25 Jan 2024 M1 BSD-3-Clause Yes Details →
v4.1.0 25 Jan 2024 M1 BSD-3-Clause Yes Details →
v4.1.0-rc.1.0.20240115101556-69b6809e8be4 15 Jan 2024 M1 BSD-3-Clause Yes Details →
v4.1.0-rc.1 12 Jan 2024 M1 BSD-3-Clause Yes Details →
v4.0.0-rc.1.0.20240111160730-72d4ab0d2d2c 11 Jan 2024 M1 BSD-3-Clause Yes Details →
v4.0.3 11 Jan 2024 M1 BSD-3-Clause Yes Details →
v4.0.0-rc.1.0.20240102145415-b21bfd901a6c 02 Jan 2024 M1 BSD-3-Clause Yes Details →
v4.0.0-rc.1.0.20240102145352-6ee6f45ef943 02 Jan 2024 M1 BSD-3-Clause Yes Details →
v4.0.0-rc.1.0.20240102101812-04bbae0f14a7 02 Jan 2024 M1 BSD-3-Clause Yes Details →
v4.0.0-rc.1.0.20231117095928-4f89eef75f7c 17 Nov 2023 M1 BSD-3-Clause Yes Details →
v4.0.2 16 Nov 2023 M1 BSD-3-Clause Yes Details →
v4.0.1 13 Oct 2023 M1 BSD-3-Clause Yes Details →
v4.0.0-rc.1.0.20231013140835-5d8e4e496ebd 13 Oct 2023 M1 BSD-3-Clause Yes Details →
v4.0.0-rc.1.0.20230922160722-77bf9aca6f98 22 Sep 2023 M1 BSD-3-Clause Yes Details →
v4.0.0 19 Sep 2023 M1 BSD-3-Clause Yes Details →
v4.0.0-rc.1.0.20230906105109-eb8e6f242218 06 Sep 2023 M1 BSD-3-Clause Yes Details →
v4.0.0-rc.2 05 Sep 2023 M1 BSD-3-Clause Yes Details →
v4.0.0-rc.1.0.20230905143115-f501d2cf230f 05 Sep 2023 M1 BSD-3-Clause Yes Details →
v4.0.0-rc.1.0.20230830161720-4bd05e521b49 30 Aug 2023 M1 BSD-3-Clause Yes Details →
v4.0.0-rc.1.0.20230824160222-8bcbc2eb1eb0 24 Aug 2023 M1 BSD-3-Clause Yes Details →
v4.0.0-rc.1 17 Aug 2023 M1 BSD-3-Clause Yes Details →
v4.0.0-20230816130942-c5278e34d8fe 16 Aug 2023 M1 — Yes Details →
v4.0.0-20230816084755-1354c9cfddbd 16 Aug 2023 M1 — Yes Details →
v4.0.0-20230816084743-25b053643515 16 Aug 2023 M1 — Yes Details →
v4.0.0-20230815165542-db82c9f06147 15 Aug 2023 M1 — Yes Details →
v4.0.0-20230815164354-f9621fb3ea59 15 Aug 2023 M1 — Yes Details →
v4.0.0-20230815164042-3081b89e1f56 15 Aug 2023 M1 — Yes Details →
v4.0.0-20230815162518-5b0814b7d860 15 Aug 2023 M1 — Yes Details →
v4.0.0-20230815160301-2e106c089fa6 15 Aug 2023 M1 — Yes Details →
v4.0.0-20230815154710-0488d8a87be5 15 Aug 2023 M1 — Yes Details →
v4.0.0-20230815140337-399a3cd4c029 15 Aug 2023 M1 — Yes Details →
v4.0.0-20230815134949-8088bc9a3538 15 Aug 2023 M1 — Yes Details →
v4.0.0-20230815133411-fa85bd070abe 15 Aug 2023 M1 — Yes Details →
v4.0.0-20230815121259-338f77dcf775 15 Aug 2023 M1 — Yes Details →
v4.0.0-20230815102910-d893bf8385be 15 Aug 2023 M1 — Yes Details →
v4.0.0-20230815080743-82258327c670 15 Aug 2023 M1 — Yes Details →
v4.0.0-20230815080252-092964bfe760 15 Aug 2023 M1 — Yes Details →
v4.0.0-20230814185611-1002b6f60508 14 Aug 2023 M1 — Yes Details →
v4.0.0-20230814154212-0b72bf32c9f8 14 Aug 2023 M1 — Yes Details →
v4.0.0-20230814152741-728dda91b373 14 Aug 2023 M1 — Yes Details →
v4.0.0-20230814152648-ca40e4c25e8e 14 Aug 2023 M1 — Yes Details →

The newest 120 of 154 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2025 1
  • 2026 1

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 2 of the 2 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/sylabs/singularity/v4

The 2 most severe of 2 vulnerabilities recorded for this package

Search all 2 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2026-47215: Singularity Incorrect Path Matching Vulnerability 4.8 medium 4.4.2 04 Jun 2026
CVE-2025-64750: Singularity Vulnerability in SELinux/AppArmor Process Labeling 4.5 medium 4.3.5 02 Dec 2025

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/sylabs/singularity/v4

Is github.com/sylabs/singularity/v4 safe to use?

Vulert records 2 vulnerabilities for github.com/sylabs/singularity/v4 in Go: 0 critical, 0 high, 2 medium and 0 low. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/sylabs/singularity/v4's Vulert package health score?

Vulert scores github.com/sylabs/singularity/v4 76/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/sylabs/singularity/v4 affected?

Yes. v4.6.0, the version you would install today, has 1 known vulnerability, and every one of them has a published fix. Upgrade to the version listed for each.

Which version of github.com/sylabs/singularity/v4 should I use?

v4.6.0 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/sylabs/singularity/v4 have?

2 vulnerabilities are recorded for github.com/sylabs/singularity/v4 in the Go ecosystem: 0 critical, 0 high, 2 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/sylabs/singularity/v4 vulnerabilities disclosed?

2 vulnerabilities were recorded for github.com/sylabs/singularity/v4 in the last 12 months, and the oldest entry in this database dates to 02 Dec 2025. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/sylabs/singularity/v4 are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/sylabs/singularity/v4 for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/sylabs/singularity/v4 version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.