Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

...

CVE-2026-78662

A vulnerability exists where a channel registered in the mux's chanList was not usable until established, allowing a malicious peer to flood incomingRequests and deadlock the entire connection . The issue is addressed by adding an atomic established state ; once set, the handlePacket function dro...