Threats Tagged 'ghsa-9gm5-9rfh-m6vx'
View all threats tagged with 'ghsa-9gm5-9rfh-m6vx'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-9gm5-9rfh-m6vx'
Click on any threat for detailed analysis and mitigation recommendations
CoreDNS versions prior to 1.14.7 improperly accepted DNS UPDATE messages over DoH, DoH3, DoQ, and DNS-over-gRPC transports, allowing unauthenticated clients to send DNS UPDATE requests through the proxy/forward plugin to upstream DNS servers. This bypassed the opcode rejection enforced on UDP and TCP transports, potentially enabling unauthorized DNS record modifications if the upstream trusts CoreDNS's source or connection without end-to-end TSIG authentication. A fix is available that enforces the correct request policy on all affected transports before dispatch. Join the discussion | GCVE Database | 09/17/2026, 20:33:05 UTC Added: 09/18/2026, 01:03:40 UTC |
Showing 1 to 1 of 1 result