Multiple vulnerabilities affect NLnet Labs Unbound up to and including version 1.26.1. These include a cache-level side-channel vulnerability that can leak upstream source port information under specific non-default configurations, DNSSEC validation bypasses that can cause trust islands to be treated as insecure, and a resource exhaustion issue from chained compression pointers that can degrade performance. These issues can facilitate cache poisoning, denial of existence for DNS records, and performance degradation. A fix is available in version 1.13.2-31.oe2203sp4.