hickory-dns vulnerabilities and threats

hickory-resolver versions before 0.26.2 have a vulnerability where bogus DNSSEC proof states are not properly propagated through key resolver APIs. This flaw allows attackers controlling the DNS answering zone or positioned on the network path to have forged DNS records accepted as valid, bypassing DNSSEC authentication checks. The vulnerability has a high severity score of 8.7 and affects versions prior to 0.26.2.