Xray-core concealed a certificate verification bypass vulnerability

Xray-core, a Go-based framework for building HTTP proxies, concealed a certificate verification bypass vulnerability. The issue was discovered by a researcher through code review. The vulnerability is now fixed in version 0.9.0 of Xray-core.