{"action":"Upgrade nsd to 4.14.3-r1 or later.","affected":[{"fixed":"4.14.3-r1","introduced":"0"}],"component":"nsd","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.24","exploited":false,"fixed_versions":["4.14.3-r1"],"id":"tcs_01M5NFGCSQ90W73XJJRCFWWDCG","modified_at":"2026-10-23T15:30:03.310433148Z","published_at":"2026-10-14T11:16:57.300Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2026-101339","https://security.alpinelinux.org/vuln/CVE-2026-101339"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2026-101339","url":"https://osv.dev/vulnerability/ALPINE-CVE-2026-101339"}],"summary":"A HIP resource record that fills the RDATA near or at is limit, and has another dname RDATA field (a HIP Rendezvous server) can overwrite the stack with up to 191 bytes of attacker controlled data. Zo"}