664 matches found
cve-test-coredns-fork
This repository does not have a README...
AZL-107279 CVE-2026-97032 affecting package coredns 1.11.4-21
HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...
AZL-107273 CVE-2026-78669 affecting package coredns 1.11.4-21
A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGSINITIALWINDOWSIZE values...
AZL-107270 CVE-2026-78659 affecting package coredns 1.11.4-21
When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...
AZL-107267 CVE-2026-78660 affecting package coredns 1.11.4-21
Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a...
AZL-107276 CVE-2026-78663 affecting package coredns 1.11.4-21
The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...
CVE-2026-82399 affecting package coredns for versions less than 1.11.4-22
CVE-2026-82399 affecting package coredns for versions less than 1.11.4-22. A patched version of the package is available...
CVE-2026-86003 affecting package coredns for versions less than 1.11.4-22
CVE-2026-86003 affecting package coredns for versions less than 1.11.4-22. A patched version of the package is available...
CLEANSTART-2026-DD22310 During the TLS 1
Security vulnerability affects the coredns package. During the TLS 1...
CLEANSTART-2026-TP40136 Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content
Security vulnerability affects the coredns package. Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content...
CLEANSTART-2026-ZQ25386 Downloading and building modules with malicious version strings can cause local code execution
Security vulnerability affects the coredns package. Downloading and building modules with malicious version strings can cause local code execution...
CLEANSTART-2026-OH69104 archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened
Security vulnerability affects the coredns package. archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened...
CLEANSTART-2026-PN80306 net/url package does not set a limit on the number of query parameters in a query
Security vulnerability affects the coredns package. The net/url package does not set a limit on the number of query parameters in a query...
CLEANSTART-2025-JA36317 issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input
Security vulnerability affects the coredns package. An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input...
CLEANSTART-2025-ZQ12729 golang
Security vulnerability affects the coredns package. The golang...
OESA-2026-4197 coredns security update
CoreDNS is a fast and flexible DNS server. The key word here is flexible: with CoreDNS you are able to do what you want with your DNS data by utilizing plugins. Security Fixes: CoreDNS is a DNS server written in Go. Prior to 1.14.7, the DNS-over-HTTPS, DNS-over-HTTP/3, DNS-over-QUIC, and...
OESA-2026-4196 coredns security update
CoreDNS is a fast and flexible DNS server. The key word here is flexible: with CoreDNS you are able to do what you want with your DNS data by utilizing plugins. Security Fixes: CoreDNS is a DNS server written in Go. Prior to 1.14.7, the DNS-over-HTTPS, DNS-over-HTTP/3, DNS-over-QUIC, and...
OESA-2026-4195 coredns security update
CoreDNS is a fast and flexible DNS server. The key word here is flexible: with CoreDNS you are able to do what you want with your DNS data by utilizing plugins. Security Fixes: CoreDNS is a DNS server written in Go. Prior to 1.14.7, the DNS-over-HTTPS, DNS-over-HTTP/3, DNS-over-QUIC, and...
OESA-2026-4194 coredns security update
CoreDNS is a fast and flexible DNS server. The key word here is flexible: with CoreDNS you are able to do what you want with your DNS data by utilizing plugins. Security Fixes: CoreDNS is a DNS server written in Go. Prior to 1.14.7, the DNS-over-HTTPS, DNS-over-HTTP/3, DNS-over-QUIC, and...