CVE-2026-39830 — A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. The blocked goroutine could not be released by calling Close(), re — CVE Database · The Intelligence Room