hickory-resolver
A Rust based DNS client, server, and resolver
View on Github
Activity
- Latest release
- 1mo ago
- Total releases
- 23
- Cadence
- ~18 days
- Last 12 months
- 8
Reach
- Downloads
- 73.1M
- Stars
- 5.4k
Details
- License
- MIT OR Apache-2.0
- First release
- Sep 26, 2023
| Version | Released | |
|---|---|---|
0.26.3
patch
|
0.26.3
patch
Dependencies (36)
+ 28 more
Changelog
Compare changes
|
|
0.26.2
patch
|
0.26.2
patch
Dependencies (36)
+ 28 more
Changelog
Compare changes
|
|
0.26.1
unknown
3 CVEs
GHSA-6f2x-v7q7-m7m5
Oct 05, 2026
hickory-resolver follows irrelevant CNAME records
Medium
Network
Low
None
None
When the Hickory DNS resolver follows CNAME records, it sends queries that are not necessary to answer the original recursive query. If there are any CNAME records in the authority section or additional section of the response, queries will be sent for those names. If there are any CNAME records that are not part of a CNAME chain starting from the original recursive query name, queries will be sent for those names. This increases query amplification beyond what is necessary to answer the recursive query. Fixed in
0.26.2
References
Updated Oct 05, 2026 · Source: OSV.dev
GHSA-6w6g-hm98-mhgm
Oct 05, 2026
hickory-resolver: Unbounded TC-retry loop in `NameServerPool::try_send` (resource-exhaustion DoS)
High
Network
Low
None
None
When the ReporterQifan Zhang, Palo Alto Networks Fixed in
0.26.2
References
Updated Oct 05, 2026 · Source: OSV.dev
CVE-2026-93657
GHSA-5j98-2g5x-46v6
Oct 05, 2026
hickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
High
None
When calling Fixed in
0.26.2
References
Updated Oct 05, 2026 · Source: OSV.dev |
0.26.1
unknown
Dependencies (35)
+ 27 more
Changelog
Compare changes
|
|
0.26.0
unknown
3 CVEs
GHSA-6f2x-v7q7-m7m5
Oct 05, 2026
hickory-resolver follows irrelevant CNAME records
Medium
Network
Low
None
None
When the Hickory DNS resolver follows CNAME records, it sends queries that are not necessary to answer the original recursive query. If there are any CNAME records in the authority section or additional section of the response, queries will be sent for those names. If there are any CNAME records that are not part of a CNAME chain starting from the original recursive query name, queries will be sent for those names. This increases query amplification beyond what is necessary to answer the recursive query. Fixed in
0.26.2
References
Updated Oct 05, 2026 · Source: OSV.dev
GHSA-6w6g-hm98-mhgm
Oct 05, 2026
hickory-resolver: Unbounded TC-retry loop in `NameServerPool::try_send` (resource-exhaustion DoS)
High
Network
Low
None
None
When the ReporterQifan Zhang, Palo Alto Networks Fixed in
0.26.2
References
Updated Oct 05, 2026 · Source: OSV.dev
CVE-2026-93657
GHSA-5j98-2g5x-46v6
Oct 05, 2026
hickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
High
None
When calling Fixed in
0.26.2
References
Updated Oct 05, 2026 · Source: OSV.dev |
0.26.0
unknown
Dependencies (35)
+ 27 more
Changelog
Compare changes
|
|
0.26.0-beta.4
unknown
3 CVEs
GHSA-6f2x-v7q7-m7m5
Oct 05, 2026
hickory-resolver follows irrelevant CNAME records
Medium
Network
Low
None
None
When the Hickory DNS resolver follows CNAME records, it sends queries that are not necessary to answer the original recursive query. If there are any CNAME records in the authority section or additional section of the response, queries will be sent for those names. If there are any CNAME records that are not part of a CNAME chain starting from the original recursive query name, queries will be sent for those names. This increases query amplification beyond what is necessary to answer the recursive query. Fixed in
0.26.2
References
Updated Oct 05, 2026 · Source: OSV.dev
GHSA-6w6g-hm98-mhgm
Oct 05, 2026
hickory-resolver: Unbounded TC-retry loop in `NameServerPool::try_send` (resource-exhaustion DoS)
High
Network
Low
None
None
When the ReporterQifan Zhang, Palo Alto Networks Fixed in
0.26.2
References
Updated Oct 05, 2026 · Source: OSV.dev
CVE-2026-93657
GHSA-5j98-2g5x-46v6
Oct 05, 2026
hickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
High
None
When calling Fixed in
0.26.2
References
Updated Oct 05, 2026 · Source: OSV.dev |
0.26.0-beta.4
unknown
Dependencies (35)
+ 27 more
Changelog
Compare changes
|
|
0.26.0-beta.3
unknown
3 CVEs
GHSA-6f2x-v7q7-m7m5
Oct 05, 2026
hickory-resolver follows irrelevant CNAME records
Medium
Network
Low
None
None
When the Hickory DNS resolver follows CNAME records, it sends queries that are not necessary to answer the original recursive query. If there are any CNAME records in the authority section or additional section of the response, queries will be sent for those names. If there are any CNAME records that are not part of a CNAME chain starting from the original recursive query name, queries will be sent for those names. This increases query amplification beyond what is necessary to answer the recursive query. Fixed in
0.26.2
References
Updated Oct 05, 2026 · Source: OSV.dev
GHSA-6w6g-hm98-mhgm
Oct 05, 2026
hickory-resolver: Unbounded TC-retry loop in `NameServerPool::try_send` (resource-exhaustion DoS)
High
Network
Low
None
None
When the ReporterQifan Zhang, Palo Alto Networks Fixed in
0.26.2
References
Updated Oct 05, 2026 · Source: OSV.dev
CVE-2026-93657
GHSA-5j98-2g5x-46v6
Oct 05, 2026
hickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
High
None
When calling Fixed in
0.26.2
References
Updated Oct 05, 2026 · Source: OSV.dev |
0.26.0-beta.3
unknown
Dependencies (35)
+ 27 more
Changelog
Compare changes
|
|
0.26.0-beta.2
unknown
3 CVEs
GHSA-6f2x-v7q7-m7m5
Oct 05, 2026
hickory-resolver follows irrelevant CNAME records
Medium
Network
Low
None
None
When the Hickory DNS resolver follows CNAME records, it sends queries that are not necessary to answer the original recursive query. If there are any CNAME records in the authority section or additional section of the response, queries will be sent for those names. If there are any CNAME records that are not part of a CNAME chain starting from the original recursive query name, queries will be sent for those names. This increases query amplification beyond what is necessary to answer the recursive query. Fixed in
0.26.2
References
Updated Oct 05, 2026 · Source: OSV.dev
GHSA-6w6g-hm98-mhgm
Oct 05, 2026
hickory-resolver: Unbounded TC-retry loop in `NameServerPool::try_send` (resource-exhaustion DoS)
High
Network
Low
None
None
When the ReporterQifan Zhang, Palo Alto Networks Fixed in
0.26.2
References
Updated Oct 05, 2026 · Source: OSV.dev
CVE-2026-93657
GHSA-5j98-2g5x-46v6
Oct 05, 2026
hickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
High
None
When calling Fixed in
0.26.2
References
Updated Oct 05, 2026 · Source: OSV.dev |
0.26.0-beta.2
unknown
Dependencies (35)
+ 27 more
Changelog
Compare changes
|
|
0.26.0-beta.1
unknown
3 CVEs
GHSA-6f2x-v7q7-m7m5
Oct 05, 2026
hickory-resolver follows irrelevant CNAME records
Medium
Network
Low
None
None
When the Hickory DNS resolver follows CNAME records, it sends queries that are not necessary to answer the original recursive query. If there are any CNAME records in the authority section or additional section of the response, queries will be sent for those names. If there are any CNAME records that are not part of a CNAME chain starting from the original recursive query name, queries will be sent for those names. This increases query amplification beyond what is necessary to answer the recursive query. Fixed in
0.26.2
References
Updated Oct 05, 2026 · Source: OSV.dev
GHSA-6w6g-hm98-mhgm
Oct 05, 2026
hickory-resolver: Unbounded TC-retry loop in `NameServerPool::try_send` (resource-exhaustion DoS)
High
Network
Low
None
None
When the ReporterQifan Zhang, Palo Alto Networks Fixed in
0.26.2
References
Updated Oct 05, 2026 · Source: OSV.dev
CVE-2026-93657
GHSA-5j98-2g5x-46v6
Oct 05, 2026
hickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
High
None
When calling Fixed in
0.26.2
References
Updated Oct 05, 2026 · Source: OSV.dev |
0.26.0-beta.1
unknown
Dependencies (34)
+ 26 more
Changelog
Compare changes
|
|
0.26.0-alpha.1
unknown
2 CVEs
GHSA-6f2x-v7q7-m7m5
Oct 05, 2026
hickory-resolver follows irrelevant CNAME records
Medium
Network
Low
None
None
When the Hickory DNS resolver follows CNAME records, it sends queries that are not necessary to answer the original recursive query. If there are any CNAME records in the authority section or additional section of the response, queries will be sent for those names. If there are any CNAME records that are not part of a CNAME chain starting from the original recursive query name, queries will be sent for those names. This increases query amplification beyond what is necessary to answer the recursive query. Fixed in
0.26.2
References
Updated Oct 05, 2026 · Source: OSV.dev
CVE-2026-93657
GHSA-5j98-2g5x-46v6
Oct 05, 2026
hickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
High
None
When calling Fixed in
0.26.2
References
Updated Oct 05, 2026 · Source: OSV.dev |
0.26.0-alpha.1
unknown
Dependencies (24)
+ 16 more
Changelog
Compare changes
|
|
0.25.2
unknown
2 CVEs
GHSA-6f2x-v7q7-m7m5
Oct 05, 2026
hickory-resolver follows irrelevant CNAME records
Medium
Network
Low
None
None
When the Hickory DNS resolver follows CNAME records, it sends queries that are not necessary to answer the original recursive query. If there are any CNAME records in the authority section or additional section of the response, queries will be sent for those names. If there are any CNAME records that are not part of a CNAME chain starting from the original recursive query name, queries will be sent for those names. This increases query amplification beyond what is necessary to answer the recursive query. Fixed in
0.26.2
References
Updated Oct 05, 2026 · Source: OSV.dev
CVE-2026-93657
GHSA-5j98-2g5x-46v6
Oct 05, 2026
hickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
High
None
When calling Fixed in
0.26.2
References
Updated Oct 05, 2026 · Source: OSV.dev |
0.25.2
unknown
Dependencies (24)
+ 16 more
Changelog
Compare changes
|
|
0.25.1
unknown
2 CVEs
GHSA-6f2x-v7q7-m7m5
Oct 05, 2026
hickory-resolver follows irrelevant CNAME records
Medium
Network
Low
None
None
When the Hickory DNS resolver follows CNAME records, it sends queries that are not necessary to answer the original recursive query. If there are any CNAME records in the authority section or additional section of the response, queries will be sent for those names. If there are any CNAME records that are not part of a CNAME chain starting from the original recursive query name, queries will be sent for those names. This increases query amplification beyond what is necessary to answer the recursive query. Fixed in
0.26.2
References
Updated Oct 05, 2026 · Source: OSV.dev
CVE-2026-93657
GHSA-5j98-2g5x-46v6
Oct 05, 2026
hickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
High
None
When calling Fixed in
0.26.2
References
Updated Oct 05, 2026 · Source: OSV.dev |
0.25.1
unknown
Dependencies (23)
+ 15 more
Changelog
Compare changes
|
|
0.25.0
unknown
2 CVEs
GHSA-6f2x-v7q7-m7m5
Oct 05, 2026
hickory-resolver follows irrelevant CNAME records
Medium
Network
Low
None
None
When the Hickory DNS resolver follows CNAME records, it sends queries that are not necessary to answer the original recursive query. If there are any CNAME records in the authority section or additional section of the response, queries will be sent for those names. If there are any CNAME records that are not part of a CNAME chain starting from the original recursive query name, queries will be sent for those names. This increases query amplification beyond what is necessary to answer the recursive query. Fixed in
0.26.2
References
Updated Oct 05, 2026 · Source: OSV.dev
CVE-2026-93657
GHSA-5j98-2g5x-46v6
Oct 05, 2026
hickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
High
None
When calling Fixed in
0.26.2
References
Updated Oct 05, 2026 · Source: OSV.dev |
0.25.0
unknown
Dependencies (23)
+ 15 more
Changelog
Compare changes
|
|
0.24.4
unknown
1 CVE
CVE-2026-93657
GHSA-5j98-2g5x-46v6
Oct 05, 2026
hickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
High
None
When calling Fixed in
0.26.2
References
Updated Oct 05, 2026 · Source: OSV.dev |
0.24.4
unknown
Dependencies (24)
+ 16 more
Changelog
Compare changes
|
|
0.24.3
unknown
1 CVE
CVE-2026-93657
GHSA-5j98-2g5x-46v6
Oct 05, 2026
hickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
High
None
When calling Fixed in
0.26.2
References
Updated Oct 05, 2026 · Source: OSV.dev |
0.24.3
unknown
Dependencies (24)
+ 16 more
Changelog
Compare changes
|
|
0.25.0-alpha.5
unknown
1 CVE
CVE-2026-93657
GHSA-5j98-2g5x-46v6
Oct 05, 2026
hickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
High
None
When calling Fixed in
0.26.2
References
Updated Oct 05, 2026 · Source: OSV.dev |
0.25.0-alpha.5
unknown
Dependencies (23)
+ 15 more
Changelog
Compare changes
|
|
0.24.2
unknown
1 CVE
CVE-2026-93657
GHSA-5j98-2g5x-46v6
Oct 05, 2026
hickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
High
None
When calling Fixed in
0.26.2
References
Updated Oct 05, 2026 · Source: OSV.dev |
0.24.2
unknown
Dependencies (24)
+ 16 more
Changelog
Compare changes
|
|
0.25.0-alpha.4
unknown
1 CVE
CVE-2026-93657
GHSA-5j98-2g5x-46v6
Oct 05, 2026
hickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
High
None
When calling Fixed in
0.26.2
References
Updated Oct 05, 2026 · Source: OSV.dev |
0.25.0-alpha.4
unknown
Dependencies (26)
+ 18 more
Changelog
Compare changes
|
|
0.25.0-alpha.3
unknown
1 CVE
CVE-2026-93657
GHSA-5j98-2g5x-46v6
Oct 05, 2026
hickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
High
None
When calling Fixed in
0.26.2
References
Updated Oct 05, 2026 · Source: OSV.dev |
0.25.0-alpha.3
unknown
Dependencies (26)
+ 18 more
Changelog
Compare changes
|
|
0.25.0-alpha.2
unknown
1 CVE
CVE-2026-93657
GHSA-5j98-2g5x-46v6
Oct 05, 2026
hickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
High
None
When calling Fixed in
0.26.2
References
Updated Oct 05, 2026 · Source: OSV.dev |
0.25.0-alpha.2
unknown
Dependencies (25)
+ 17 more
Changelog
Compare changes
|
|
0.25.0-alpha.1
unknown
1 CVE
CVE-2026-93657
GHSA-5j98-2g5x-46v6
Oct 05, 2026
hickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
High
None
When calling Fixed in
0.26.2
References
Updated Oct 05, 2026 · Source: OSV.dev |
0.25.0-alpha.1
unknown
Dependencies (23)
+ 15 more
Changelog
Compare changes
|
|
0.24.1
unknown
1 CVE
CVE-2026-93657
GHSA-5j98-2g5x-46v6
Oct 05, 2026
hickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
High
None
When calling Fixed in
0.26.2
References
Updated Oct 05, 2026 · Source: OSV.dev |
0.24.1
unknown
Dependencies (23)
+ 15 more
Changelog
Compare changes
|
|
0.24.0
unknown
1 CVE
CVE-2026-93657
GHSA-5j98-2g5x-46v6
Oct 05, 2026
hickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
High
None
When calling Fixed in
0.26.2
References
Updated Oct 05, 2026 · Source: OSV.dev |
0.24.0
unknown
Dependencies (23)
+ 15 more
Changelog
Compare changes
|
|
0.1.0
unknown
1 CVE
CVE-2026-93657
GHSA-5j98-2g5x-46v6
Oct 05, 2026
hickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
High
None
When calling Fixed in
0.26.2
References
Updated Oct 05, 2026 · Source: OSV.dev |