CVE-2026-93657
1 advisory.
crates.io/hickory-resolver CVE-2026-93657: high 7.5, EPSS 0.23%
hickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures
Action: Upgrade hickory-resolver to 0.26.2 or later.
cargo update -p hickory-resolver --precise 0.26.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.26.2 | - |
Fixed versions
| 0.26.2 |
Sources
- osv: GHSA-5j98-2g5x-46v6
- https://github.com/hickory-dns/hickory-dns/security/advisories/GHSA-5j98-2g5x-46v6
- https://github.com/hickory-dns/hickory-dns/pull/3871
- https://github.com/hickory-dns/hickory-dns/commit/92f93c0b889f6a292bc943304d88c4c6561fe1b9
- https://github.com/hickory-dns/hickory-dns
- https://github.com/hickory-dns/hickory-dns/releases/tag/v0.26.2
CVE-2026-93657 · published · modified · JSON