CVE-2026-123588

The Hickory DNS recursive resolver is vulnerable to a Denial of Service (DoS) attack via a cached empty connection pool . Specifically, all versions of the hickory-recursor crate and hickory-resolver versions 0.26.0 before 0.26.2 are affected. The issue occurs when the resolver follows a referral...