Open Source Vulnerabilities

log4j

Updated log4j packages fix security vulnerability

github.com/sylabs/singularity

Insecure permissions on user namespace / fakeroot temporary rootfs in Singularity

github.com/sylabs/singularity

Incorrect Permission Assignment for Critical Resource in Singularity

github.com/sylabs/singularity

"Verify All" Returns Success Despite Validation Failures in Singularity

github.com/sylabs/singularity

Execution Control List (ECL) Is Insecure in Singularity

github.com/opencontainers/runc

devices resource list treated as a blacklist by default

github.com/opencontainers/runc

Information Exposure in RunC

github.com/opencontainers/runc

Privilege Elevation in runc

github.com/tendermint/tendermint

Signature verification failure in Tendermint

github.com/tendermint/tendermint

Denial of Service in TenderMint

github.com/sourcegraph/sourcegraph, github.com/sourcegraph/sourcegraph

Open redirect vulnerability in Sourcegraph

github.com/bitly/oauth2_proxy

Cross-site Request Forgery (CSRF)