Affected by GO-2025-3743
and 2 other vulnerabilities
GO-2025-3743: CoreDNS Vulnerable to DoQ Memory Exhaustion via Stream Amplification in github.com/coredns/coredns
GO-2025-3942: CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion in github.com/coredns/coredns
GO-2026-4289: CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages in github.com/coredns/coredns
Package deprecated is used when we deprecated plugin. In plugin.cfg just go from
startup:github.com/coredns/caddy/startupshutdown
To:
startup:deprecated
And things should work as expected. This means starting CoreDNS will fail with an error. We can only
point to the release notes to details what next steps a user should take. I.e. there is no way to add this
to the error generated.
Affected by 
Documentation
¶
Source Files