Repository navigation
Security: dnsjava/dnsjava
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
TSIG: MAC comparison is not constant-timeGHSA-m779-jq28-q7v7 published
Oct 25, 2026 by ibauersachsLow -
X25Record accepts Unicode digits and silently converts them into non-digit DNS wire bytesGHSA-whp4-9hfm-h8xr published
Oct 25, 2026 by ibauersachsLow -
Message normalization fails on invalid CNAME entriesGHSA-hg22-jxmg-ppq9 published
Oct 25, 2026 by ibauersachsModerate -
Unbounded Pre-allocation via DNS Header Count Fields Leads to Amplified Memory Allocation (DoS)GHSA-rwxq-7vpj-2rm5 published
Oct 25, 2026 by ibauersachsModerate -
Missing response validation in DoH ResolverGHSA-m23c-5x5g-5ff6 published
Oct 25, 2026 by ibauersachsModerate -
NSEC3 closest encloser proof can exhaust CPU resources (KeyTrap)GHSA-mmwx-rj87-vfgr published
Jul 21, 2024 by ibauersachsModerate -
Denial-of-Service Algorithmic Complexity Attacks (KeyTrap)GHSA-crjg-w57m-rqqf published
Jul 21, 2024 by ibauersachsModerate -
Improper response validation allowing DNSSEC BypassGHSA-cfxw-4h78-h7fw published
Jul 21, 2024 by ibauersachsHigh
Learn more about advisories related to dnsjava/dnsjava in the GitHub Advisory Database