ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy operating system, or the forwarding of an agent to an attacker-controlled host.
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-28041.json"