CVEs
Browse the synced catalog, newest first.
- CVE-2026-123587Hickory-DNS 0.26.0 before 0.26.2 DNSSEC Nonexistence Forgery via Wraparound NSEChickory-dns
- CVE-2026-123586Hickory DNS 0.25.0-alpha.3 through 0.25.2 Query Amplification via Cyclic Referralshickory-dns
- CVE-2026-123585Hickory DNS 0.25.0 before 0.26.2 Query Amplification via Irrelevant CNAME Recordshickory-dns · hickory-resolver
- CVE-2026-123584Hickory-DNS 0.26.0 before 0.26.2 UDP Client Denial of Service via Spoofed Responseshickory-dns
- CVE-2026-123583Hickory DNS 0.25.0 through 0.25.2 Missing Bailiwick Filtering on Negative Responseshickory-dns
- CVE-2026-123582Hickory DNS 0.25.0 before 0.26.2 DNSSEC Validation Bypass via SOA Recordhickory-dns
- CVE-2026-123581Hickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Unrelated RRsethickory-dns
- CVE-2026-123580Hickory-DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Nonexistence Proof Forgery via NSEC3hickory-dns
- CVE-2026-123579Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via Wildcard Expansionhickory-dns
- CVE-2026-123578Hickory DNS 0.26.0 before 0.26.2 Response Validation Bypass via QDCOUNT=0hickory-dns
- CVE-2026-123577Hickory DNS 0.24.0 before 0.26.2 DoH Unbounded Request Body Denial of Servicehickory-dns
- CVE-2026-123576Hickory DNS 0.24.0 through 0.26.1 Memory Exhaustion via DNS-over-QUIC Requestshickory-dns
- CVE-2026-123575Hickory DNS before 0.26.2 DoH Memory Exhaustion via Incomplete Request Bodieshickory-dns
- CVE-2026-123574Hickory DNS 0.24.0 before 0.26.2 Denial of Service via Zone File Parserhickory-dns
- CVE-2026-123573hickory-dns from 0.20.1 before 0.26.2 Panic in SVCB/HTTPS Zone File Parserhickory-dns
- CVE-2026-123572Hickory-dns 0.20.1 before 0.26.2 Panic DoS via SVCB/HTTPS Zone Parserhickory-dns
- CVE-2026-123571Hickory DNS from 0.26.0 before 0.26.2 Panic via TSIG RDATA Decodinghickory-dns
- CVE-2026-123570Hickory DNS from 0.18 before 0.26.2 Memory Amplification DoS via RR Countshickory-dns
- CVE-2026-123569Devalue before 5.6.3 Denial of Service via Sparse Array Serializationsveltejs devalue · devalue
- CVE-2026-123568Sveltejs devalue before 5.6.3 Prototype Pollution via uneval Outputsveltejs devalue
- CVE-2026-123567Sveltejs devalue before 5.6.4 Prototype Injection via parse and unflattensveltejs devalue
- CVE-2026-123566Devalue before 5.9.3 CPU Amplification Denial of Service via unevalsveltejs devalue · devalue
- CVE-2026-123565Devalue before 5.9.3 Quadratic Expansion Denial of Service via unevalsveltejs devalue · devalue
- CVE-2026-123564Sveltejs devalue before 5.9.3 Memory Exhaustion via uneval Sparse Arrayssveltejs devalue
- CVE-2026-123563Devalue before 5.9.3 Typed-Array Allocation Validation Bypass via parsesveltejs devalue
- CVE-2026-123562Devalue 5.8.0 before 5.9.3 Denial of Service via stringifyAsync Unhandled Rejectionsveltejs devalue · devalue
- CVE-2026-123561Sveltejs devalue before 5.9.3 proto Rejection Bypass via Property-Key Coercionsveltejs devalue · devalue
- CVE-2026-123560Zebra before 7.0.0 Sync Denial of Service via Forged Checkpoint Block BodyZcashFoundation zebra
- CVE-2026-123559Zebra before 7.0.0 Denial of Service via Quadratic Sighash ComputationZcashFoundation zebra
- CVE-2026-123558Zebra before 7.0.0 Checkpoint Sync Denial of Service via Cancelled Verifier RewindZcashFoundation zebra