In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not.
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-95532.json"