🔍 Filter Threats
| Title | Severity | PoC | Actively Exploited | Source | Date |
|---|---|---|---|---|---|
| CVE-2026-123587 HIGH The DNSSEC validation in the Hickory DNS hickory-net crate 0.26.0 before 0.26.2 identifies wraparound NSEC records by comparing the next domain name t... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123586 HIGH Hickory DNS 0.25.0-alpha.3 through 0.25.2 contains a query amplification vulnerability in its recursive resolver, which mishandles cyclic sibling name... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123585 MEDIUM The hickory-resolver component of Hickory DNS 0.25.0 before 0.26.2 follows irrelevant CNAME records when resolving recursive queries, sending queries ... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123584 HIGH The hickory-net crate in Hickory DNS 0.26.0 before 0.26.2 stops listening and returns an error when a client UDP connection receives a datagram that c... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123583 MEDIUM The recursive resolver in Hickory DNS hickory-recursor 0.25.0 through 0.25.2 and hickory-resolver 0.26.0 before 0.26.2 does not apply out-of-bailiwick... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123582 MEDIUM The validating recursive resolver and validating forwarder in Hickory DNS (hickory-server) 0.25.0 before 0.26.2 do not check whether the SOA record pa... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123581 MEDIUM Hickory DNS hickory-proto through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before 0.26.2 contain a DNSSEC validation flaw that accepts a response ... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123580 HIGH Hickory DNS hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto through 0.26.0-alpha.1 perform insufficient checks on NSEC3 record names during ... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123579 MEDIUM DNSSEC validation in Hickory DNS hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto through 0.26.0-alpha.1 does not distinguish NODATA response... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123578 MEDIUM Hickory DNS hickory-net 0.26.0 before 0.26.2 and hickory-proto 0.25.0 through 0.25.2 skip the check that a UDP response's question section matche... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123577 HIGH Hickory DNS from 0.24.0 before 0.26.2 contains a resource exhaustion vulnerability that allows remote attackers to consume server memory via unbounded... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123576 HIGH Hickory DNS 0.24.0 through 0.26.1 contains a memory exhaustion vulnerability that allows remote attackers to consume server resources by sending incom... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123575 HIGH Hickory DNS before 0.26.2 contains a resource exhaustion vulnerability in its DNS-over-HTTPS HTTP/2 server that lacks sufficient timeouts or limits fo... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123574 HIGH The zone file parser in the hickory-proto crate of Hickory DNS 0.24.0 before 0.26.2 panics when a single token in a zone file is 4096 bytes or longer.... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123573 HIGH hickory-dns from 0.20.1 before 0.26.2 contains a denial of service vulnerability in the hickory-proto SVCB and HTTPS record presentation format parser... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123572 HIGH Hickory-dns from 0.20.1 before 0.26.2 contains a denial of service vulnerability in the hickory-proto SVCB and HTTPS record presentation format parser... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123571 HIGH Hickory DNS from 0.26.0 before 0.26.2 contains an integer underflow vulnerability in TSIG RDATA decoding that allows remote attackers to trigger a pan... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123570 HIGH The DNS wire-format message parser in hickory-proto (Hickory DNS) 0.18 before 0.26.2 preallocates record vectors sized by the untrusted ANCOUNT, NSCOU... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123569 HIGH The devalue package for npm before 5.6.3 can consume excessive CPU and memory when serializing sparse arrays with uneval or stringify. An attacker who... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123568 LOW Sveltejs devalue before 5.6.3 contains a prototype pollution vulnerability that allows attackers to alter object prototypes by supplying untrusted dat... | LOW | ????? | ????? | NVD | 6 days ago |