EUVD-2026-125726

dnspython is a DNS toolkit for Python. Prior to version 2.9.2, the fromtext parser for WKS records does not require the service number to be between 0 and 65535 before using it as a bitmap offset. An attacker-controlled zone file can supply a larger number, causing the service bitmap to grow to a...

CVE-2026-128089

The dnspython DNS toolkit for Python is vulnerable to excessive memory and CPU consumption in versions prior to 2.9.2 . The root cause is located in the from_text() parser for WKS records , which fails to validate that the service number is between 0 and 65535 before using it as a bitmap offset. ...