Sagernet Sing-box 1.5.0 Beta 5
Approved changes feed: RSS · Atom
cpe:2.3:a:sagernet:sing-box:1.5.0:beta5:*:*:*:*:*:*part: a version: 1.5.0 update: beta5
| Vendor | Sagernet (ebaa85bc-6f42-51cd-9078-6b9ea8ae07a4) |
|---|---|
| Product | Sing Box (414f8286-6c15-588f-8f0d-bedad57031eb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/sagernet/sing-box |
purl2cpe | 2026-06-01 10:13:41.516795 |
pkg:golang/github.com/sagernet/sing-box |
purl2cpe | 2026-06-01 10:13:41.516797 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-43644 |
vulnerable | 2026-06-08 06:12:37.639231 |
Improper authentication in the SOCKS5 inbound in sing-box
CRITICAL (9.1)
Sing-box is an open source proxy system. Affected versions are subject to an authentication bypass when specially crafted requests are sent to sing-box. This affects all SOCKS5 inbounds with user authentication and an attacker may be able to bypass authentication. Users are advised to update to sing-box 1.4.4 or to 1.5.0-rc.4. Users unable to update should not expose the SOCKS5 inbound to insecure environments.
Published: 2023-09-25T19:12:35.949Z
Updated: 2024-09-24T19:29:54.599Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.