h2o picotls

• CVE-2026-59993 Medium 6.5 Picotls has NULL pointer dereference during handshake, when running as a client 0.2%
• CVE-2026-45271 Medium 5.5 picotls has infinite recursion in the minicrypto ASN.1 decoder 0.2%
• CVE-2024-45402 High 8.6 Picotls double free 0.5%