CoreDNS 1.14.3 addresses 5 critical flaws in DoH, DoQ, and gRPC. Fix authentication bypasses and DoS risks by upgrading your DNS infrastructure today.
CoreDNS
A critical flaw (CVE-2025-58063) in the CoreDNS etcd plugin allows attackers to pin DNS cache entries for years, causing a denial of service for service updates.
A DoS flaw in CoreDNS (CVE-2025-47950) allows unauthenticated attackers to crash servers using DNS-over-QUIC. Update to 1.12.2 immediately or disable QUIC.