A vulnerability in hickory-proto versions 0.26.0 up to but not including 0.26.2 causes an integer underflow when decoding malformed TSIG DNS records. This underflow can lead to a panic and crash in builds with overflow checks enabled. The issue is fixed in version 0.26.2.