theoretically a browser could have the same vulnerability and has a vastly higher attack surface.

has there ever been an example of such a vulnerability in openssh?