Launchpad.net

CVE 2021-23222

A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption.

See the CVE page on Mitre.org for more details.