Bugzilla – Dependency tree for Bug 1218207
VUL-0: CVE-2023-48795: cosign: golang.org/x/crypto/ssh: prefix truncation breaking ssh channel integrity