CVE-2026-123585

The hickory-resolver component in Hickory DNS versions 0.25.0 before 0.26.2 is vulnerable to a query amplification attack. The root cause is that the resolver follows irrelevant CNAME records during recursive query resolution, such as those included in the authority or additional sections or thos...