In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not.
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2026-73283.json"