Skip to main content
cve.nowby Sazabi
← crates.io
crates.ioPackage

hickory-proto

3 known vulnerabilities (2 high, 1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 2 high, 1 medium
Weekly downloads
2.6M
Dependents
0
Registry
crates.io

Advisories 3

  • Hickory DNS hickory-proto 0.3.1 before 0.26.1 CPU Exhaustion via BinEncoder Name Compression

    Affected: from 0.3.1, fixed in 0.26.1.

  • hickory-proto: NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses

    Affected: from 0.25.0-alpha.3, through 0.25.2; from 0.25.0-alpha.3, fixed in 0.26.0-beta.1.

  • CVE-2025-25188Medium 5.7

    DNSSEC validation may accept broken authentication chains

    Affected: from 0.8.0, fixed in 0.24.3.