CVE-2026-0966 Libssh: buffer underflow in ssh_get_hexa() on invalid input