Xray-core concealed a certificate verification bypass vulnerability

2 comments

• eriwang915 2 hours ago

  Xray-core's pinnedPeerCertSha256 treated an inserted leaf as the pinned cert, and the fix commit never called it a vulnerability.

• cryptolobster 2 hours ago

  The reaction to Xray-core is disappointing