Tailworm: eleven unfixed flaws in a mesh VPN, and the SSH path that carries root

A security audit found eleven flaws in Tailscale 1.104.2 and headscale v0.29.5, including a root path through SSH forwarding.