CVE-2026-123592

The hickory-net crate in Hickory DNS versions 0.26.0-beta.1 before 0.26.2 is vulnerable to a DNSSEC validation bypass via a name hash collision. The root cause is that Name's Hash ignores label lengths while ValidationCacheKey compares only that hash. This allows an attacker controlling an unsign...