Xray-core concealed a certificate verification bypass vulnerability
Summary
A detailed GitHub issue recounts a certificate verification bypass vulnerability in Xray-core, traced to changes in certificate pinning logic and removal of certain verification safeguards. It covers the timeline of discovery, disclosure, and patches, and critiques the handling and communication of the vulnerability.