OpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple exit notifications from authenticated clients which will extend the validity of a closing session
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-28882.json"