GHSA-W4XR-HQV8-CH44 Forge: TLS client crash on an unsupported ServerHello compression method

Summary A forge.tls client accepts any compression method in the ServerHello, although it only offers no compression. An unknown method makes connection.process throw an uncaught Error when the client handles ServerHelloDone, before the server is authenticated. A malicious server or an on-path...