Github.Com Sylabs Sif V2 vulnerabilities

1 known vulnerability affecting github.com/sylabs_sif_v2.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2022-39237MEDIUMCVSS 5.0≥ 0, < 2.8.12022-10-06

CVE-2022-39237 [MEDIUM] CWE-327 SIF's Digital Signature Hash Algorithms Not Validated SIF's Digital Signature Hash Algorithms Not Validated ### Impact The `github.com/sylabs/sif/v2/pkg/integrity` package does not verify that the hash algorithm(s) used are cryptographically secure when verifying digital signatures. ### Patches A patch is available in version >= v2.8.1 of the module. Users are encouraged to upgrade. The patch is commit https://github.com/sylabs/sif/commit/07fb86029a12e3210f61