VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/sagernet/sing: vulnerability history, versions and safety

github.com/sagernet/sing is a package in the Go ecosystem. Vulert records 1 vulnerability for it across 120 releases, first recorded in Oct 2023. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
1 vulnerabilities recorded U1
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/sagernet/sing vulnerabilities

Vulert verdict on github.com/sagernet/sing v0.9.6 i

Updated on 23 Oct 2026

Action needed: v0.9.6 has 1 known vulnerability, but every one of them has a fix. Upgrade to the version listed below and you are clear.

Package health score 75/100
  • Security Minor issues
  • Maintenance Sustainable
  • Popularity Niche
  • Community Quiet

What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →

  • Current release v0.9.6 — affected i
  • Vulnerabilities on record 1 over 1 year · 0 in the last year i
  • Latest disclosure 02 Oct 2023 i
  • Highest CVSS n/a i
  • With no published fix 0 i
  • Stars 131 i
  • OpenSSF scorecard 3/10 i
  • Last release this month i
  • Licence GPL-3.0-or-later i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/sagernet/sing, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.9.7-0.20261023072922-1b1a0ff12a68 23 Oct 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.7-0.20261023063221-0661e90abab8 23 Oct 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.7-0.20261022215834-56e8e9fb54a4 22 Oct 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.7-0.20261022215818-9aba2e980dba 22 Oct 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.7-0.20261022103141-53d540bd48c1 22 Oct 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.7-0.20261022103141-f5a5e6943fa1 22 Oct 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.7-0.20261021163806-3fb8c2fbb49d 21 Oct 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.7-0.20261021163752-d79c15c8f7b8 21 Oct 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.7-0.20261021145936-4d4bdf543dbe 21 Oct 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.7-0.20261021145936-e7528d5db0a2 21 Oct 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.7-0.20261021145935-090c7dd569ae 21 Oct 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.7-0.20261021145935-9565436e5a83 21 Oct 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.7-0.20261020082138-81baee13d24d 20 Oct 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.7-0.20261020082052-a009a8dfa87b 20 Oct 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.7-0.20261020082052-aec80d2d4bb7 20 Oct 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.7-0.20261020035407-cdf1618d6873 20 Oct 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.7-0.20261020035405-749ff46463b3 20 Oct 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.7-0.20261020024932-302ced11960a 20 Oct 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.7-0.20261020024930-ff74c537243a 20 Oct 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.7-0.20260929150544-0ad23b637bd4 29 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.7-0.20260929150544-6f21f2425a95 29 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.7-0.20260929145605-8d939df03478 29 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.7-0.20260929145605-c9e42f52d00f 29 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.6-0.20260927091435-fcc22e2b9f96 27 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.7-0.20260927091435-fcc22e2b9f96 27 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.6 27 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.6-0.20260927091426-5f9aad7def20 27 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.6-0.20260922013359-4ca3bebe0b8e 22 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.6-0.20260922013354-87c33f17688f 22 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.6-0.20260920093640-814d533a21ef 20 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.6-0.20260920093512-38496bf4f1df 20 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.6-0.20260920042754-58cb386a6005 20 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.6-0.20260920042621-643b9d01347d 20 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.6-0.20260920031729-0432d073820b 20 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.6-0.20260920031521-0f86e07920f7 20 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.6-0.20260919160821-2364c2783695 19 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.6-0.20260919160821-f122e8936799 19 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.6-0.20260919152234-5fc164c061cf 19 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.6-0.20260919152213-438fd16dfb39 19 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.5 19 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.6-0.20260919114348-bc51067a8cbf 19 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.5-0.20260917164122-8fc5da509c10 17 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.5-0.20260917153356-5f479a5fcf6d 17 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.5-0.20260917142815-f37989cadbf0 17 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.4-0.20260914135810-80bfa92a0607 14 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.5-0.20260914135810-80bfa92a0607 14 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.4-0.20260914135501-c417c998c022 14 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.4-0.20260914135246-897a07c7d22b 14 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.4-0.20260912053229-7776850263cd 12 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.4-0.20260910135123-2148fb758d91 10 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.4 10 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.4-0.20260910134106-ef37987fa0be 10 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.4-0.20260909041121-b9fce5efdd99 09 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.4-0.20260908053243-3e69d072c058 08 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.3 08 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.3-0.20260906082413-0113c392f609 06 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.2 06 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.2-0.20260906075432-e4ec01a58675 06 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.1 06 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.1-0.20260904133552-ffcabb706b1c 04 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.1-0.20260902140658-8bb71f553f8d 02 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.0 02 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.0-beta.4.0.20260902104404-02ea509ed96a 02 Sep 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.0-beta.4 23 Aug 2026 U1 GPL-3.0-or-later Yes Details →
v0.8.15-0.20260821101240-b2a2cf135c6c 21 Aug 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.0-beta.3 21 Aug 2026 U1 GPL-3.0-or-later Yes Details →
v0.8.14 21 Aug 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.0-beta.2 10 Aug 2026 U1 GPL-3.0-or-later Yes Details →
v0.8.13 10 Aug 2026 U1 GPL-3.0-or-later Yes Details →
v0.8.12-0.20260804143108-f22b119cc7a2 04 Aug 2026 U1 GPL-3.0-or-later Yes Details →
v0.8.13-0.20260804143108-f22b119cc7a2 04 Aug 2026 U1 GPL-3.0-or-later Yes Details →
v0.9.0-beta.1 04 Aug 2026 U1 GPL-3.0-or-later Yes Details →
v0.8.12 01 Aug 2026 U1 GPL-3.0-or-later Yes Details →
v0.8.12-0.20260801132743-b631c8a7f9d5 01 Aug 2026 U1 GPL-3.0-or-later Yes Details →
v0.8.12-0.20260731081310-cb3e09a281aa 31 Jul 2026 U1 GPL-3.0-or-later Yes Details →
v0.8.12-0.20260727093221-6a8f0ea47052 27 Jul 2026 U1 GPL-3.0-or-later Yes Details →
v0.8.12-0.20260727003324-d096a164bc7f 27 Jul 2026 U1 GPL-3.0-or-later Yes Details →
v0.8.12-0.20260726145744-7836cad22478 26 Jul 2026 U1 GPL-3.0-or-later Yes Details →
v0.8.12-0.20260726145744-ef2df370afca 26 Jul 2026 U1 GPL-3.0-or-later Yes Details →
v0.8.12-0.20260721063414-596db5dd6ef4 21 Jul 2026 U1 GPL-3.0-or-later Yes Details →
v0.8.12-0.20260717153536-4f1ed45a99a5 17 Jul 2026 U1 GPL-3.0-or-later Yes Details →
v0.8.12-0.20260717023913-84ab32b56cb8 17 Jul 2026 U1 GPL-3.0-or-later Yes Details →
v0.8.12-0.20260716111929-074fc9988b34 16 Jul 2026 U1 GPL-3.0-or-later Yes Details →
v0.8.12-0.20260716052609-8dd9c88f039f 16 Jul 2026 U1 GPL-3.0-or-later Yes Details →
v0.8.12-0.20260716045442-39b4bbf33686 16 Jul 2026 U1 GPL-3.0-or-later Yes Details →
v0.8.12-0.20260716043156-a69d567776cc 16 Jul 2026 U1 GPL-3.0-or-later Yes Details →
v0.8.12-0.20260716041440-445e0d2d32f1 16 Jul 2026 U1 GPL-3.0-or-later Yes Details →
v0.8.12-0.20260715103206-ac5f044167e4 15 Jul 2026 U1 GPL-3.0-or-later Yes Details →
v0.8.12-0.20260702081104-2ded2af32d3d 02 Jul 2026 U1 GPL-3.0-or-later Yes Details →
v0.8.12-0.20260702074557-63e2fd680d8a 02 Jul 2026 U1 GPL-3.0-or-later Yes Details →
v0.8.12-0.20260701111927-87e1e819f10a 01 Jul 2026 U1 GPL-3.0-or-later Yes Details →
v0.8.12-0.20260625092856-31bbf21d4b12 25 Jun 2026 U1 GPL-3.0-or-later Yes Details →
v0.8.11 25 Jun 2026 U1 GPL-3.0-or-later Yes Details →
v0.8.11-0.20260514110501-905ad103a4df 14 May 2026 U1 GPL-3.0-or-later Yes Details →
v0.8.11-0.20260514083559-7297f9541547 14 May 2026 U1 GPL-3.0-or-later Yes Details →
v0.8.11-0.20260513151928-16a9cdbd8a5d 13 May 2026 U1 GPL-3.0-or-later Yes Details →
v0.8.10 13 May 2026 U1 GPL-3.0-or-later Yes Details →
v0.8.10-0.20260428084616-2bc976d03e39 28 Apr 2026 U1 GPL-3.0-or-later Yes Details →
v0.8.10-0.20260427232324-f758c54b7409 27 Apr 2026 U1 GPL-3.0-or-later Yes Details →
v0.8.10-0.20260427232245-dd3bbca1c1ed 27 Apr 2026 U1 GPL-3.0-or-later Yes Details →
v0.8.10-0.20260424005254-7b2d7ac5204c 24 Apr 2026 U1 — Yes Details →
v0.8.10-0.20260421111925-3e730f2301b4 21 Apr 2026 U1 — Yes Details →
v0.8.10-0.20260421111925-f15740393055 21 Apr 2026 U1 — Yes Details →
v0.8.9 21 Apr 2026 U1 — Yes Details →
v0.8.9-0.20260420011825-ee298fea05e6 20 Apr 2026 U1 — Yes Details →
v0.8.8 19 Apr 2026 U1 — Yes Details →
v0.8.8-0.20260419124655-fbfc081294d5 19 Apr 2026 U1 — Yes Details →
v0.8.7 19 Apr 2026 U1 — Yes Details →
v0.8.7-0.20260419045022-49bc0f27f072 19 Apr 2026 U1 — Yes Details →
v0.8.7-0.20260417135631-0d22698ed386 17 Apr 2026 U1 — Yes Details →
v0.8.7-0.20260416084641-60846c117dd8 16 Apr 2026 U1 — Yes Details →
v0.8.6 16 Apr 2026 U1 — Yes Details →
v0.8.6-0.20260416081236-39fd89c058fd 16 Apr 2026 U1 — Yes Details →
v0.8.5 16 Apr 2026 U1 — Yes Details →
v0.8.5-0.20260414080930-1a7d1576867a 14 Apr 2026 U1 — Yes Details →
v0.8.5-0.20260414061014-3597f84f897c 14 Apr 2026 U1 — Yes Details →
v0.8.5-0.20260413075835-f518f5326bd0 13 Apr 2026 U1 — Yes Details →
v0.8.5-0.20260411123740-2a8053daaf99 11 Apr 2026 U1 — Yes Details →
v0.8.5-0.20260404181712-947827ec3849 04 Apr 2026 U1 — Yes Details →
v0.8.4 01 Apr 2026 U1 — Yes Details →

The newest 120 of 1,431 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2023 1

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 1 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/sagernet/sing

The 1 most severe of 1 vulnerabilities recorded for this package

Search all 1 in the database →
Vulnerability Severity Fixed version ↑ Disclosed ↑
CVE-2023-43644: Authentication bypass in github.com/sagernet/sing N/A unrated 0.2.12-0.20230925092853-5b05b5c147d9 02 Oct 2023

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/sagernet/sing

Is github.com/sagernet/sing safe to use?

Vulert records 1 vulnerabilities for github.com/sagernet/sing in Go: 0 critical, 0 high, 0 medium and 0 low, plus 1 not yet rated. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/sagernet/sing's Vulert package health score?

Vulert scores github.com/sagernet/sing 75/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/sagernet/sing affected?

Yes. v0.9.6, the version you would install today, has 1 known vulnerability, and every one of them has a published fix. Upgrade to the version listed for each.

Which version of github.com/sagernet/sing should I use?

v0.9.6 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/sagernet/sing have?

1 vulnerability is recorded for github.com/sagernet/sing in the Go ecosystem: 0 critical, 0 high, 0 medium and 0 low, plus 1 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/sagernet/sing vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/sagernet/sing in the last 12 months, and the oldest entry in this database dates to 02 Oct 2023. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/sagernet/sing are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/sagernet/sing for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/sagernet/sing version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.