https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-11T22:32:05.686376+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-123603 CVE-2026-123603 — Hickory DNS Missing IPv4-Mapped IPv6 Canonicalization Access Control Bypass 2026-11-11T22:32:05.689561+00:00

Affected: hickory-dns

hickory-proto and hickory-resolver 0.26.0 before 0.26.2, hickory-server 0.25.0-alpha.1 before 0.26.2, and hickory-recursor 0.25.0-alpha.3 through 0.26.0-alpha.1 fail to canonicalize IPv4-mapped IPv6 addresses when checking deny_answers, deny_server, or AccessControlSet rules. Attackers can use IPv4-mapped addresses to evade answer filtering, trigger queries to denied nameservers, or reach hickory-server library deployments on dual-stack IPv6 sockets from denied clients.