CVE-2026-93657

A flaw was found in hickory-resolver. This vulnerability allows attackers to bypass Domain Name System Security Extensions DNSSEC authentication checks. By controlling the answering zone or being positioned on the network path, an attacker can have forged DNS records accepted as validated, leadin...

PT-2026-95426

Name of the Vulnerable Software and Affected Versions hickory-resolver versions prior to 0.26.2 Description The software fails to propagate bogus DNSSEC proof states through the Resolver::lookup and Resolver::lookup ip APIs, which allows invalid records to be returned as successful results. This...