CVE-2024-22189 - Memory Exhaustion in quic-go via Malicious NEW_CONNECTION_ID Frames
On January 23, 2024, a critical vulnerability (CVE-2024-22189) was disclosed in quic-go, one of the most popular Go libraries implementing the QUIC protocol. Prior to