Improper validation of signature hash algorithms in github.com/sylabs/sif/v2
Details
The Singularity Image Format (SIF) reference implementation does not verify that the hash algorithm(s) used are cryptographically secure when verifying digital signatures.