Code injection

2023-03-0322:15:00

PRIOn knowledge base

www.prio-n.com

shadowsocksx-ng

security document

code signing

injection

nvd

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.3%

ShadowsocksX-NG 1.10.0 signs with com.apple.security.get-task-allow entitlements because of CODE_SIGNING_INJECT_BASE_ENTITLEMENTS.

CPENameOperatorVersion
shadowsocksx-ngeq1.10.0

CPE	Name	Operator	Version
	shadowsocksx-ng	eq	1.10.0

References

github.com/shadowsocks/ShadowsocksX-NG/pull/1456

shadowsocks.org