fix: CVE-2024-45337: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass

[jdesouza]

CVE-2024-45337: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass

Description

CVE-2024-45337: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass

Related issues

• Close #XXX

Related PRs

• #XXX
• #YYY

Remove this section if you don't have related PRs.

Checklist

• I've read the guidelines for contributing to this repository.
• I've followed the conventions in the PR title.
• I've added tests that prove my fix is effective or that my feature works.
• I've updated the documentation with the relevant information (if needed).
• I've added usage information (if the PR introduces new options)
• I've included a "before" and "after" example to the description (if the PR is a user interface change).

[knqyf263]

We confirmed it wouldn't affect Trivy, so users don't need to care about it, but it's better to fix it anyway. Thanks.

Ref: #8100

[knqyf263]

After I reviewed GHSA-v778-237x-gjrc again, it turned out v0.30.0 was not a patched version.
#8103