Threats affecting pkg:github/jpillora/chisel

Chisel versions prior to 1.11.5 contain an authorization bypass vulnerability where authenticated clients can circumvent --authfile ACL restrictions. The ACL is only enforced during the initial handshake for declared remotes but not on subsequent SSH channels, allowing clients to tunnel traffic to arbitrary destinations reachable from the server. This issue has been fixed in version 1.11.5.