Documents that musl OpenSSH has accepted any 257+ character password for passwordless accounts since 2016, with check script, PoC and patch. Narrow blast radius, but fully verifiable by any sysadmin.
openssh on musl accepted any 257+ char password for accounts with no password. since 2016. check.sh, poc, patch.
★189