id: GO-2023-2077
modules:
    - module: github.com/sagernet/sing
      versions:
        - fixed: 0.2.12-0.20230925092853-5b05b5c147d9
      vulnerable_at: 0.2.12-0.20230921162020-494f88c9b8bf
      packages:
        - package: github.com/sagernet/sing/protocol/socks
          symbols:
            - HandleConnection0
          derived_symbols:
            - HandleConnection
summary: Authentication bypass in github.com/sagernet/sing
cves:
    - CVE-2023-43644
ghsas:
    - GHSA-r5hm-mp3j-285g
references:
    - advisory: https://github.com/SagerNet/sing-box/security/advisories/GHSA-r5hm-mp3j-285g
    - fix: https://github.com/SagerNet/sing/commit/5b05b5c147d9650e8accb4441e216c72a61f4859