title: Panic when processing post-handshake message on QUIC connections in crypto/tls
description: Processing an incomplete post-handshake message for a QUIC connection can cause a panic.
problem types: CWE-400: Uncontrolled Resource Consumption
affected:
{
vendor: Go standard library
product: crypto/tls
collectionURL: https://pkg.go.dev
packageName: crypto/tls
versions:
version: 1.21.0-0, lessThan: 1.21.1, status: affected, versionType: semver
programRoutines:
name: QUICConn.HandleData
defaultStatus: unaffected
}