Xray-core concealed a certificate verification bypass vulnerability

This report highlights a serious trust and supply-chain risk in a widely used proxy/security component: a certificate verification bypass could expose traffic to man-in-the-middle attacks, while the issue was allegedly fixed without transparent disclosure to users. For CIOs and technology leaders, the strategic takeaway is that even infrastructure and security tools can introduce hidden exposure, making third-party software governance, rapid vulnerability communication, and configuration control critical to organizational resilience and customer trust.