github.com/coredns/coredns vulnerabilities
CVEs whose affected-version data names the github.com/coredns/coredns package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-32936High· 7.5CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification
CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification
▾ Twilightcoredns · github.com/coredns/corednsEPSS 0.67%via OSV
CVE-2026-32934High· 7.5CoreDNS' DoQ worker pool does not bound stream backlog
CoreDNS' DoQ worker pool does not bound stream backlog
▾ Twilightcoredns · github.com/coredns/corednsEPSS 0.47%via OSV
CVE-2025-68151MediumCoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages
CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages
▾ Sunlitcoredns · github.com/coredns/corednsEPSS 0.48%via OSV