OpenSSL disclosed a low-severity flaw in QUIC servers that queue incoming channels for unknown destination connection IDs without enforcing a limit, potentially leading to resource exhaustion. The fix introduces a default limit of 256 pending connections.