CVE:CVE-2022-23538
CNNVD:CNNVD-202301-1304
SCS Library Client是Singularity Container Services (SCS)的Golang客户端。
SCS Library Client 存在安全漏洞。攻击者利用该漏洞可以执行多部分并发下载。
solution:Upgrade sylabs singularity_container_services_library to a higher version than 1.3.2,1.3.3,1.4.0,1.4.1,and avoid the version 1.3.2,1.3.3,1.4.0,1.4.1