Xray-core's pinnedPeerCertSha256 treated an inserted leaf as the pinned cert, and the fix commit never called it a vulnerability.

Your LLM left out the clear hypocrisy and the part where the fixed version still had a vulnerability

	▲	ddtaylor 32 minutes ago \| parent [-]
		His comment actually added value, but yours doesn't seem to have the same value.