Go-resolver vulnerabilities

1 known vulnerability in Go-resolver from Go-resolver Project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  github.com/peterzen/goresolver: Insufficient Verification of Data Authenticity

  CVE-2022-3347Dec 28, 2022Github.com/peterzen/goresolver

  DNSSEC validation is not performed correctly. An attacker can cause this package to report successful validation for invalid, attacker-controlled records. Root DNSSEC public keys are not validated, permitting an attacker to present a self-signed root key and d