tag
No-Cve
High
OpenSSH Forwarded-Agent Lock/Unlock State Confusion → Unauthorized PKCS#11 Provider Load (No CVE)
OpenSSH portable — ssh, sshd, ssh-agent
unpatched
Critical
XRING — XQUIC QPACK Ring Buffer Resize Underflow (Remote Unauthenticated DoS)
[alibaba/xquic](https://github.com/alibaba/xquic) — QUIC/HTTP-3 library, used by Tengine and reportedly across Alibaba's cloud/CDN infrastructure (Taobao, AliPay)
unpatched