malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop
Details
CVE-2026-39830 affects multiple packages. A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. See references for individual vulnerability details.