There is a vulnerability in the fizz library prior to v2023.01.30.00 where a CHECK failure can be triggered remotely

A peer could send empty handshake fragments containing only padding which would be kept in memory until a full handshake was received, resulting in memory exhaustion

An improperly performed length calculation on a buffer in PlaintextRecordLayer could lead to an infinite loop and denial-of-service based on user input