Sylabs Scs-Library-Client vulnerabilities

1 known vulnerability affecting sylabs/scs-library-client.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2022-23538HIGHCVSS 7.6fixed in 1.34v>= 1.4.0, < 1.4.22023-01-17

CVE-2022-23538 [HIGH] CWE-522 CVE-2022-23538: github.com/sylabs/scs-library-client is the Go client for the Singularity Container Services (SCS) C github.com/sylabs/scs-library-client is the Go client for the Singularity Container Services (SCS) Container Library Service. When the scs-library-client is used to pull a container image, with authentication, the HTTP Authorization header sent by the client to the library service may be incorrectly leaked to an S3 backing storage provider. This occur