Threats tagged 'rustsec-2026-0514'

A vulnerability in hickory-resolver versions before 0.26.2 caused DNSSEC validation failures to be ignored by Resolver::lookup() and Resolver::lookup_ip(), returning records marked as valid even when DNSSEC validation failed. This could lead applications that rely on successful lookups as proof of validation to accept forged or tampered DNS responses. The issue was fixed in version 0.26.2, where lookups with bogus DNSSEC records now fail with a specific error and are not retried.