Xray-core concealed a certificate verification bypass vulnerability

2 comments

• $eriwang915 an hour ago

  Xray-core's pinnedPeerCertSha256 treated an inserted leaf as the pinned cert, and the fix commit never called it a vulnerability.

• $cryptolobster 2 hours ago

  The reaction to Xray-core is disappointing