CVE-2026-123607

The hickory-dns project contains an unbounded loop vulnerability in hickory-proto versions 0.25.0-alpha.3 through 0.25.2 and hickory-net versions before 0.26.1. The flaw exists within the DnssecDnsHandle NSEC3 closest-encloser proof validation when the SOA owner is not an ancestor of the QNAME. A...