CVE-2026-123595

The Hickory DNS validating recursor contains a DNSSEC validation flaw in the NSEC3 handler affecting hickory-proto versions 0.25 through 0.26.0-alpha.1 and hickory-net versions 0.26.0-beta.1 before 0.26.2. The root cause is that the handler matches the closest encloser by hash alone without verif...