CVE-2023-27574: Shadowsocks Shadowsocksx-NG

Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days.

ShadowsocksX-NG 1.10.0 signs with com.apple.security.get-task-allow entitlements because of CODE_SIGNING_INJECT_BASE_ENTITLEMENTS.

Affected products

• Shadowsocks Shadowsocksx-NG: version 1.10.0 only

Published 2023-03-03. Last modified 2026-06-17.