{"action":"Upgrade hickory-resolver to 0.26.2 or later.","affected":[{"fixed":"0.26.2","introduced":"0.26.0-beta.1"}],"component":"hickory-resolver","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.26.2"],"ghsa_id":"GHSA-6w6g-hm98-mhgm","id":"tcs_01M5KETVGSAHXBCB5M19NDCWT9","modified_at":"2026-10-05T23:15:03.989023689Z","published_at":"2026-10-05T22:55:10Z","references":["https://osv.dev/vulnerability/GHSA-6w6g-hm98-mhgm","https://github.com/hickory-dns/hickory-dns/security/advisories/GHSA-6w6g-hm98-mhgm","https://github.com/hickory-dns/hickory-dns/pull/3871","https://github.com/hickory-dns/hickory-dns/commit/0848d2e9e4183499343318a690d6dd5e48bc21c1","https://github.com/hickory-dns/hickory-dns/commit/5d37e2e04a36a87013a213b58b820345ef76a263","https://github.com/hickory-dns/hickory-dns","https://github.com/hickory-dns/hickory-dns/releases/tag/v0.26.2"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-6w6g-hm98-mhgm","url":"https://osv.dev/vulnerability/GHSA-6w6g-hm98-mhgm"}],"summary":"hickory-resolver: Unbounded TC-retry loop in `NameServerPool::try_send` (resource-exhaustion DoS)"}