golang.org/x/crypto/ssh: Invoking byte arithmetic causes underflow and panic (CVE-2026-46597) | HOL Guard CVE