crates.io/hickory-proto: medium

hickory-proto vulnerable to CPU exhaustion during message encoding due to O(n²) name compression

Action: Upgrade hickory-proto to 0.26.1 or later.

cargo update -p hickory-proto --precise 0.26.1

Affected

Fixed versions

Sources

• osv: GHSA-q2qq-hmj6-3wpp
• https://github.com/hickory-dns/hickory-dns/security/advisories/GHSA-q2qq-hmj6-3wpp
• https://github.com/hickory-dns/hickory-dns
• https://rustsec.org/advisories/RUSTSEC-2026-0119.html

published 2026-05-07T02:59:48Z · modified 2026-09-10T03:51:06.690531529Z · JSON