Buffered application data sent to outer server after ECH rejection

Brotli certificate decompression can allocate up to 1 GiB before authentication

Unauthenticated ServerHello can downgrade later connections to classical key exchange

Debug impls for client session values expose TLS secrets

TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries

rustls network-reachable panic in Acceptor::accept

rustls::ConnectionCommon::complete_io could fall into an infinite loop based on network input