https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 11 Nov 2026 19:39:00 +0000 https://db.gcve.eu/vuln/rustsec-2026-0490 <p><strong>Affected:</strong> crates.io: hickory-proto</p> <p>The zone file lexer read each token in a loop capped at 4,096 iterations, with an `assert!` on the loop counter as a safety bound. A single token long enough to reach that bound, for example a very long name or character string in a zone file, triggered the assertion and the parser panicked instead of returning the token or an error.</p> <p>Code that parses zone files from an untrusted source can be made to panic, which is a denial of service.</p> <p>The fix removes the iteration bound, so the lexer ends only when it reaches the end of a token or an error. It is in 0.26.2.</p> <p><strong>Affected:</strong> crates.io: hickory-proto</p> <p>The zone file lexer read each token in a loop capped at 4,096 iterations, with an `assert!` on the loop counter as a safety bound. A single token long enough to reach that bound, for example a very long name or character string in a zone file, triggered the assertion and the parser panicked instead of returning the token or an error.</p> <p>Code that parses zone files from an untrusted source can be made to panic, which is a denial of service.</p> <p>The fix removes the iteration bound, so the lexer ends only when it reaches the end of a token or an error. It is in 0.26.2.</p> https://db.gcve.eu/vuln/rustsec-2026-0490