{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"pdns-recursor","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":[],"id":"tcs_01M5NSQWWQM9SNVHF2SSW99K17","modified_at":"2026-10-25T10:00:34.577302046Z","published_at":"2026-07-23T09:16:26.843Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2026-52684","https://security-tracker.debian.org/tracker/CVE-2026-52684"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2026-52684#Debian:14/pdns-recursor","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-52684"}],"summary":"If the auth responds very slowly and the records expire in between, the capping of TTLs is not enforced for lack of data. This does not happen on regular resolve as then then the child records are use"}