CVE-2026-42254
1 advisory.
crates.io/hickory-recursor CVE-2026-42254: high
Hickory DNS's Record Cache Accepts AUTHORITY-Section NS from Sibling Zone via Parent-Pool Zone-Context Elevation
Action: Upgrade hickory-recursor to 0.26.0 or later.
cargo update -p hickory-recursor --precise 0.26.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.24.0 | 0.26.0 | - |
Fixed versions
| 0.26.0 |
Sources
- osv: GHSA-83hf-93m4-rgwq
- https://github.com/hickory-dns/hickory-dns/security/advisories/GHSA-83hf-93m4-rgwq
- https://github.com/hickory-dns/hickory-dns
CVE-2026-42254 · published · modified · JSON