Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

...

undertow: client side invocation timeout raised when calling over HTTP2

A flaw was found in Undertow that tripped the client-side invocation timeout with certain calls made over HTTP2. This flaw allows an attacker to carry out denial of service attacks...