domain

A DNS library for Rust.

View on Cargo

Activity

Latest release: 1mo ago
Total releases: 33
Cadence: ~2 months
Last 12 months: 4

Reach

Downloads: 12.1M

Details

License: BSD-3-Clause
First release: Oct 14, 2016

Releases

Version	Released
`0.12.3` patch	Sep 25, 2026
`0.12.2` unknown 1 CVE	Jul 16, 2026
`0.12.1` unknown 1 CVE	May 29, 2026
`0.12.0` unknown 1 CVE	Apr 23, 2026
`0.11.1` unknown 1 CVE	Oct 22, 2025
`0.11.0` unknown 1 CVE	May 21, 2025
`0.10.4` unknown 1 CVE	Mar 31, 2025
`0.10.3` unknown 1 CVE	Oct 14, 2024
`0.10.2` unknown 1 CVE	Oct 10, 2024
`0.10.1` unknown 1 CVE	Jun 03, 2024
`0.10.0` unknown 1 CVE	Apr 30, 2024
`0.9.3` unknown 1 CVE	Dec 28, 2023
`0.9.2` unknown 1 CVE	Nov 16, 2023
`0.9.1` unknown 1 CVE	Oct 27, 2023
`0.9.0` unknown 1 CVE	Oct 18, 2023
`0.8.1` unknown 1 CVE	Sep 18, 2023
`0.8.0` unknown 1 CVE	May 12, 2023
`0.7.2` unknown 1 CVE	Mar 02, 2023
`0.7.1` unknown 1 CVE	Oct 06, 2022
`0.7.0` unknown 1 CVE	Sep 15, 2022
`0.6.1` unknown 1 CVE	Mar 30, 2021
`0.6.0` unknown 1 CVE	Mar 22, 2021
`0.5.3` unknown 1 CVE	Aug 25, 2020
`0.5.2` unknown 1 CVE	Jun 23, 2020
`0.5.1` unknown 1 CVE	Jun 02, 2020
`0.5.0` unknown 1 CVE	Apr 03, 2020
`0.4.0` unknown 1 CVE	Jan 30, 2019
`0.2.4` unknown 1 CVE	Aug 03, 2018
`0.2.3` unknown 1 CVE	Feb 27, 2018
`0.2.2` unknown 1 CVE	Aug 16, 2017
`0.2.1` unknown 1 CVE	Jun 20, 2017
`0.2.0` unknown 1 CVE	Mar 19, 2017
`0.1.0` unknown 1 CVE	Oct 14, 2016

Dependencies (45)

Depends on

0.12.3

Used by

Supply-chain exposure

55 tracked projects depend on this, <1% of every package we track.

A known CVE here directly exposes every one of them.

Vulnerable dependencies

1 of 43

rustls-pemfile 1 CVE

These dependencies are still vulnerable in their latest release. Whether the exact version this package pins is affected isn't checked yet.

Known CVEs (1)

RUSTSEC-2026-0310 Sep 25, 2026

Various panics, soundness and resource exhaustion issues

Version 0.12.3 fixes a large number of panics, soundness issues, and CPU and memory exhaustion issues in all parts of the crate.

The following is a summary of the issues per affected components. For details, please see the release notes.

Base

Limited the number of compression pointers that are followed when parsing a compressed name to 255 to avoid following really long chains.

Limited the length of CNAME chains followed by Message::canonical_name to 20. This also fixed an integer overflow in this method when ANCOUNT wasu16::MAX.

Changed QuestionSection::answer to skip over all remaining questions without parsing the QNAMEs to avoid being slowed down by malicious names.

Added length checks when scanning and parsing variable length record data types. This fixes issues with the message builder, which assumes that record data is never too large for placing in a message.

Stub Resolver

Fixed possible panics in the resolver’s FoundHosts::qname and FoundHosts::canonical_name.

Fixed various issues in SRV processing.

Zonefile parsing

Fixed soundness issues when reading UTF-8 and an integer overflow when reading unsigned integers.

Fixed a panic when reading empty TXT records.

Client and server transports, DNSSEC signer and validator

Fixed various panics that could be triggered by malicious incoming DNS messages.

Zonetree

Fixed various panics and a memory exhaustion issue when updating the zone.

Acknowledgements

We would like to thank Qifan Zhang, Palo Alto Networks, Antoni (Tony) Jagodka (@DrVelvetFog), and @SebastiaanYN for reporting issues fixed in this release.

Fixed in

0.12.3

References

https://crates.io/crates/domain
https://rustsec.org/advisories/RUSTSEC-2026-0310.html
https://github.com/NLnetLabs/domain/releases/tag/v0.12.3

Updated Sep 25, 2026 · Source: OSV.dev

Insights

Releases per month

last 12 months

Release mix

patch 1
unknown 32

33 releases

Dependencies over time

per release

Release calendar

2026

Jan

Feb

Mar

Apr

May

Jun

Jul

Aug

Sep

Oct

Nov

Dec

Less More