{"action":"Upgrade hickory-resolver to 0.26.2 or later.","affected":[{"fixed":"0.26.2","introduced":"0"}],"component":"hickory-resolver","cve_ids":["CVE-2026-93657"],"ecosystem":"crates.io","epss":0.00231,"exploited":false,"fixed_versions":["0.26.2"],"ghsa_id":"GHSA-5j98-2g5x-46v6","id":"tcs_01M5KET3N3RW3SE9Y9PMH028M7","modified_at":"2026-10-05T23:00:04.250222435Z","published_at":"2026-10-05T22:54:35Z","references":["https://osv.dev/vulnerability/GHSA-5j98-2g5x-46v6","https://github.com/hickory-dns/hickory-dns/security/advisories/GHSA-5j98-2g5x-46v6","https://github.com/hickory-dns/hickory-dns/pull/3871","https://github.com/hickory-dns/hickory-dns/commit/92f93c0b889f6a292bc943304d88c4c6561fe1b9","https://github.com/hickory-dns/hickory-dns","https://github.com/hickory-dns/hickory-dns/releases/tag/v0.26.2"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-5j98-2g5x-46v6","url":"https://osv.dev/vulnerability/GHSA-5j98-2g5x-46v6"}],"summary":"hickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures"}