CVE-2026-123575

Hickory DNS versions before 0.26.2 are vulnerable to a resource exhaustion issue in the DNS-over-HTTPS (DoH) HTTP/2 server. The root cause is a lack of sufficient timeouts or limits for incomplete request bodies . A remote attacker can exploit this by opening DoH connections and sending incomplet...