hickory-proto
crates.io3 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting hickory-protopage 1 of 1
- CVE-2025-25188MEDIUMCVSS 5.7EG 5.7fixed in 0.24.32025-02-10
Hickory DNS is a Rust based DNS client, server, and resolver. A vulnerability present starting in version 0.8.0 and prior to versions 0.24.3 and 0.25.0-alpha.5 impacts Hickory DNS users relying on DNSSEC verification in the client library,…
- CVE-2026-123607HIGHCVSS 7.5EG 7.5fixed in 0.26.0-beta.12026-11-08
Hickory DNS hickory-proto 0.25.0-alpha.3 through 0.25.2 and hickory-net before 0.26.1 contain an unbounded loop vulnerability in DnssecDnsHandle NSEC3 closest-encloser proof validation when the SOA owner is not an ancestor of the QNAME. Up…
- CVE-2026-123608HIGHCVSS 7.5EG 7.5fixed in 0.26.12026-11-08
Hickory DNS hickory-proto from 0.3.1 before 0.26.1 contains a denial of service vulnerability in BinEncoder that allows remote attackers to exhaust CPU through quadratic-time name compression. Attackers can send malicious DNS messages with…
Check whether hickory-proto is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for hickory-proto CVEs against the assets you own.
Book a Demo →