CVE-2026-52856: Go Ssh Payload Slice Out Of Bounds

Slicing SSH request payload without checking its length can cause a runtime panic if the payload is smaller than expected. Always check `len(req.Payload)` before indexing or slicing.

Provally CuratedPublic repositoryMediumHigh confidenceVerifiedApache-2.0Go
greprules fetch cve-2026-52856-go-ssh-payload-slice-out-of-bounds --engine opengrep

Description

Slicing SSH request payload without checking its length can cause a runtime panic if the payload is smaller than expected. Always check `len(req.Payload)` before indexing or slicing.