A vulnerability in golang.org/x/crypto/ssh prior to version 0.45.0 allows an attacker to cause unbounded memory consumption by sending SSH GSSAPI authentication requests with an excessive number of mechanisms. This flaw does not affect confidentiality or integrity but impacts availability due to resource exhaustion.