> When NGINX Open Source is configured to use the HTTP/3 QUIC module, a remote unauthenticated attacker along with conditions beyond their control can use a specially crafted HTTP/3 session to reopen a QPACK encoder stream.
[1]:
https://github.com/nginx/nginx/commit/ceccdbd2ee799d020a371b...
https://github.com/nginx/nginx/commit/9e293766e73c469c015df5...