A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers.
https://groups.google.com/g/golang-announce/c/ouZIlBimOsE?pli=1