GHSA-5wf9-h793-w73c: Xray-core: Pinning a CA certificate via pinnedPeerCertSha256 can lead to the success of MITM attacks

October 2, 2026

Pinning a CA certificate via pinnedPeerCertSha256 can lead to the success of MITM attacks in some cases.

References

github.com/XTLS/Xray-core/commit/64fada32b5b9e6ae064a038fa0e4e2b766499bd5
github.com/XTLS/Xray-core/pull/6472
github.com/XTLS/Xray-core/releases/tag/v26.7.11
github.com/XTLS/Xray-core/security/advisories/GHSA-5wf9-h793-w73c
github.com/advisories/GHSA-5wf9-h793-w73c

Code Behaviors & Features

Detect and mitigate GHSA-5wf9-h793-w73c with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →