CVE-2026-116013

The OpenResty lua-resty-dns library, in versions prior to 0.24 , is vulnerable to a Denial of Service attack. The root cause is an improper input validation flaw within the parse_section() and _decode_name() functions, which fail to verify resource record lengths against the received message. An ...

EUVD-2026-109271

OpenResty lua-resty-dns before 0.24 contains an improper input validation vulnerability in parsesection and decodename that fails to check resource record lengths against the received message. Attackers controlling or spoofing a queried nameserver can send truncated record headers or RDATA, raisi...