id: GO-2023-1941
modules:
    - module: github.com/elazarl/goproxy
      versions:
        - fixed: 0.0.0-20230731152917-f99041a5c027
      vulnerable_at: 0.0.0-20221015165544-a0805db90819
      packages:
        - package: github.com/elazarl/goproxy
          symbols:
            - ProxyHttpServer.handleHttps
          derived_symbols:
            - ProxyHttpServer.ServeHTTP
summary: Panic when handling invalid request in MITM mode in github.com/elazarl/goproxy
description: An invalid request can cause a panic when running in MITM mode.
cves:
    - CVE-2023-37788
ghsas:
    - GHSA-4r8x-2p26-976p
references:
    - report: https://github.com/elazarl/goproxy/issues/502
    - fix: https://github.com/elazarl/goproxy/pull/507