open-source software community

Xray-core, a widely used proxy and censorship-circumvention tool, is being accused of quietly concealing a certificate verification bypass vulnerability rather than disclosing it openly. The claim was raised in a public discussion on the project's net4people forum, drawing significant attention from the security community. Critics argue that withholding such a flaw leaves users of the tool exposed to interception, and the episode has reignited debate over responsible disclosure practices in open-source security software.