RUSTSEC-2026-0120
NoneCVSS
—
EPSS
—
Published
May 1, 2026
CISA due date
—
The record
NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | hickory-net | 0.0.0-0 | 0.26.1 |
| crates.io | hickory-net | 0.26.0-alpha.1 | 0.26.1 |
| crates.io | hickory-proto | 0.25.0-alpha.3 | No fix |
| crates.io | hickory-proto | 0.25.0-alpha.3 | 0.26.0-beta.1 |