RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation

Wildcard CNAME proof validation bypass

Prefetch Feature Allows Persistent Ghost Domain Cache Poisoning Attack

Reject more queries with invalid header values

Spoofed answers can mark an authoritative non-EDNS capable

ZONEMD validation can be bypassed

Missing input validation for catalog zones

Insufficient input validation in ZoneToCache

Information about ECS zero scoped answers might leak to clients that use a specific ECS

ZoneToCache can poison the cache

EDNS options smuggling

Denial of service via crafted DoH3 queries

Out-of-bounds read in SetMacAddrAction

Denial of service via IXFR queries

Denial of service via DoH3 queries

Prometheus denial of service via crafted DNS queries

Insufficient input validation of internal web server

Incorrect Behaviour of Views with TCP PROXY Requests

Concurrency and locking defects in GSS-TSIG

Insufficient Validation of Autoprimary SOA Queries

Insufficient Validation of Names During AXFR

Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail

Insufficient validation of HTTPS and SVCB records

Possible file descriptor exhaustion in forward-dnsupdate

LDAP DN injection

Incomplete domain name sanitization during

Denial of service via crafted DNSCrypt query

Outgoing DoH excessive memory allocation

DoQ/DoH3 excessive memory allocation

PRSD detection denial of service