SingularityCE follows the Sylabs Security Policy available at:
https://sylabs.io/security-policy/
If you have found a vulnerability in SingularityCE, please review the policy linked above and then contact security@sylabs.io
PGP encrypted email is accepted, with key details at the link above.