{"id":"GO-2026-6651","summary":"Pinning a CA certificate via pinnedPeerCertSha256 can lead to the success of MITM attacks in github.com/xtls/xray-core","details":"Pinning a CA certificate via pinnedPeerCertSha256 can lead to the success of MITM attacks in github.com/xtls/xray-core","aliases":["GHSA-5wf9-h793-w73c"],"modified":"2026-10-20T00:45:10.065378958Z","published":"2026-10-20T00:20:45Z","database_specific":{"review_status":"REVIEWED","url":"https://pkg.go.dev/vuln/GO-2026-6651"},"references":[{"type":"ADVISORY","url":"https://github.com/XTLS/Xray-core/security/advisories/GHSA-5wf9-h793-w73c"},{"type":"WEB","url":"https://github.com/XTLS/Xray-core/commit/64fada32b5b9e6ae064a038fa0e4e2b766499bd5"},{"type":"WEB","url":"https://github.com/XTLS/Xray-core/pull/6472"},{"type":"WEB","url":"https://github.com/XTLS/Xray-core/releases/tag/v26.7.11"}],"affected":[{"package":{"name":"github.com/xtls/xray-core","ecosystem":"Go","purl":"pkg:golang/github.com/xtls/xray-core"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.260113.0"},{"fixed":"1.260327.1-0.20260710210335-64fada32b5b9"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://vuln.go.dev/ID/GO-2026-6651.json"}}],"schema_version":"1.9.0"}