CVE-2026-93657

hickory-resolver versions before 0.26.2 contain a DNSSEC validation bypass. The root cause is a failure to propagate bogus DNSSEC proof states through the Resolver::lookup() and Resolver::lookup_ip() APIs, causing invalid records to be returned as successful results. An attacker controlling the a...

EUVD-2026-82939

hickory-resolver versions before 0.26.2 fail to propagate bogus DNSSEC proof states through the Resolver::lookup and Resolver::lookupip APIs, allowing invalid records to be returned as successful results. Attackers controlling the answering zone or positioned on the network path can have forged D...