{"action":"Upgrade github.com/sagernet/sing-box to 1.4.5 or later.","affected":[{"fixed":"1.4.5","introduced":"0"},{"fixed":"1.5.0-rc.5","introduced":"1.5.0-beta.1"}],"component":"github.com/sagernet/sing-box","cve_ids":["CVE-2023-43644"],"ecosystem":"Go","epss":0.00823,"exploited":false,"fixed_versions":["1.4.5","1.5.0-rc.5"],"ghsa_id":"GHSA-r5hm-mp3j-285g","id":"tcs_01M5KFM3R913X3277FS7Z0MMN7","modified_at":"2026-09-10T03:50:03.205884551Z","published_at":"2023-09-26T19:35:39Z","references":["https://osv.dev/vulnerability/GHSA-r5hm-mp3j-285g","https://github.com/SagerNet/sing-box/security/advisories/GHSA-r5hm-mp3j-285g","https://nvd.nist.gov/vuln/detail/CVE-2023-43644","https://github.com/SagerNet/sing-box/commit/9891fd672f5da9f20f59a1693271a946727f49e2","https://github.com/SagerNet/sing/commit/5b05b5c147d9650e8accb4441e216c72a61f4859","https://github.com/SagerNet/sing-box","https://github.com/SagerNet/sing-box/releases/tag/v1.4.5"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-r5hm-mp3j-285g","url":"https://osv.dev/vulnerability/GHSA-r5hm-mp3j-285g"}],"summary":"sing-box vulnerable to improper authentication in the SOCKS inbound"}