go-grpc-compression has a zstd decompression bombing vulnerability in github.com/mostynb/go-grpc-compression