{"action":"Upgrade hickory-resolver to 0.26.2 or later.","affected":[{"fixed":"0.26.2","introduced":"0.25.0"}],"component":"hickory-resolver","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.26.2"],"ghsa_id":"GHSA-6f2x-v7q7-m7m5","id":"tcs_01M5KETN1MBK0FZ6QFDXPMJGR1","modified_at":"2026-10-05T23:15:03.987605025Z","published_at":"2026-10-05T22:55:18Z","references":["https://osv.dev/vulnerability/GHSA-6f2x-v7q7-m7m5","https://github.com/hickory-dns/hickory-dns/security/advisories/GHSA-6f2x-v7q7-m7m5","https://github.com/hickory-dns/hickory-dns/pull/3871","https://github.com/hickory-dns/hickory-dns/commit/4689fc8d3ddd3e3f99ec1b7be4e2e9e78afd2e6b","https://github.com/hickory-dns/hickory-dns/commit/ccd6952378f250c714fc2af0cb1053e1c179f832","https://github.com/hickory-dns/hickory-dns","https://github.com/hickory-dns/hickory-dns/releases/tag/v0.26.2"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-6f2x-v7q7-m7m5","url":"https://osv.dev/vulnerability/GHSA-6f2x-v7q7-m7m5"}],"summary":"hickory-resolver follows irrelevant CNAME records"}