—
GO-2026-6651
Pinning a CA certificate via pinnedPeerCertSha256 can lead to the success of MITM attacks in github.com/xtls/xray-core
Quick fix
GO-2026-6651 — github.com/xtls/xray-core: upgrade to the fixed version with the command below.
go get github.com/xtls/xray-core@v1.260327.1-0.20260710210335-64fada32b5b9Details
Pinning a CA certificate via pinnedPeerCertSha256 can lead to the success of MITM attacks in github.com/xtls/xray-core
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/xtls/xray-core
Introduced in:
1.260113.0Fixed in: 1.260327.1-0.20260710210335-64fada32b5b9Fix
go get github.com/xtls/xray-core@v1.260327.1-0.20260710210335-64fada32b5b9