Comment # 1 on bug 1222468 from Camila Camargo de Matos

Go module quic-go is affected by CVE-2024-22189 and this module is embedded in
openSUSE:Factory/caddy (quic-go version 0.40.0).