Browse CVEs

HIGH 7.5 CVE-2026-62309 CoreDNS is a DNS server written in Go. Prior to 1.14.4, a single 28-byte UDP datagram can crash the CoreDNS process when the proxyproto plugin is ena… Coredns 1.14.4+ Fix from $1,9502026-07-16 MEDIUM 5.3 CVE-2026-62299 CoreDNS is a DNS server written in Go. Prior to 1.14.5, the CoreDNS rewrite plugin supports edns0 rewrite rules with an optional revert flag, and two… Coredns 1.14.5+ Fix from $1,6002026-07-16 CRITICAL 9.8 CVE-2026-35579 CoreDNS is a DNS server written in Go. In versions prior to 1.14.3, the gRPC, QUIC, DoH, and DoH3 transport implementations incorrectly handle TSIG a… Coredns 1.14.3+ Fix from $2,3002026-05-05 HIGH 7.5 CVE-2026-32936 CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the DNS-over-HTTPS (DoH) GET path accepts oversized dns= query parameter va… Coredns 1.14.3+ Fix from $1,9502026-05-05 HIGH 7.5 CVE-2026-33190 CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the tsig plugin can be bypassed on non-plain-DNS transports (DoT, DoH, DoH3… Coredns 1.14.3+ Fix from $1,9502026-05-05 HIGH 7.5 CVE-2026-33489 CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the transfer plugin can select the wrong ACL stanza when both a parent zone… Coredns 1.14.3+ Fix from $1,9502026-05-05 HIGH 7.5 CVE-2026-32934 CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the DNS-over-QUIC (DoQ) server can be driven into unbounded goroutine and m… Coredns 1.14.3+ Fix from $1,9502026-05-05 HIGH 7.5 CVE-2026-26018 CoreDNS is a DNS server that chains plugins. Prior to version 1.14.2, a denial of service vulnerability exists in CoreDNS's loop detection plugin tha… Coredns 1.14.2+ Fix from $1,9502026-03-06 MEDIUM 6.3 CVE-2026-26017 CoreDNS is a DNS server that chains plugins. Prior to version 1.14.2, a logical vulnerability in CoreDNS allows DNS access controls to be bypassed du… Coredns 1.14.2+ Fix from $1,6002026-03-06 HIGH 7.5 CVE-2025-68151 CoreDNS is a DNS server that chains plugins. Prior to version 1.14.0, multiple CoreDNS server implementations (gRPC, HTTPS, and HTTP/3) lack critical… Coredns 1.14.0+ Fix from $1,9502026-01-08 HIGH 7.5 CVE-2025-47950 CoreDNS is a DNS server that chains plugins. In versions prior to 1.12.2, a Denial of Service (DoS) vulnerability exists in the CoreDNS DNS-over-QUIC… Coredns 1.12.2+ Fix from $1,9502025-06-06 HIGH 7.5 CVE-2023-30464 CoreDNS through 1.10.1 enables attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack. Coredns after 1.10.1 Fix from $1,9502024-09-18 HIGH 7.5 CVE-2023-28452 An issue was discovered in CoreDNS through 1.10.1. There is a vulnerability in DNS resolving software, which triggers a resolver to ignore valid resp… Coredns after 1.10.1 Fix from $1,9502024-09-18 MEDIUM 6.1 CVE-2022-2837 A flaw was found in coreDNS. This flaw allows a malicious user to redirect traffic intended for external top-level domains (TLD) to a pod they contro… Coredns Mitigation only Fix from $1,6002023-03-03