Affected by GO-2026-4630 and 9 other vulnerabilities

GO-2026-4630: CoreDNS ACL Bypass in github.com/coredns/coredns

GO-2026-4635: CoreDNS Loop Detection Denial of Service Vulnerability in github.com/coredns/coredns

GO-2026-4969: CoreDNS' DoQ worker pool does not bound stream backlog in github.com/coredns/coredns

GO-2026-5164: CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification in github.com/coredns/coredns

GO-2026-5417: CoreDNS' transfer stanza selection uses lexicographic compare (subzone ACL bypass) in github.com/coredns/coredns

GO-2026-5583: CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC in github.com/coredns/coredns

GO-2026-5667: CoreDNS has TSIG authentication bypass on gRPC and QUIC transports in github.com/coredns/coredns

GO-2026-6506: CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP in github.com/coredns/coredns

GO-2026-6507: CoreDNS: Unauthenticated memory exhaustion in custom transports in github.com/coredns/coredns

GO-2026-6805: CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin in github.com/coredns/coredns

upstream

package

v1.14.0 Latest Latest Go to latest Published: Jan 7, 2026 License: Apache-2.0 Imports: 6 Imported by: 509

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/coredns/coredns

Links

Open Source Insights

Documentation ¶

Overview ¶

Package upstream abstracts a upstream lookups so that plugins can handle them in an unified way.

Index ¶

type Upstream
- func New() *Upstream
- func (u *Upstream) Lookup(ctx context.Context, state request.Request, name string, typ uint16) (*dns.Msg, error)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Upstream ¶

type Upstream struct{}

Upstream is used to resolve CNAME or other external targets via CoreDNS itself.

func New ¶ added in v1.1.4

func New() *Upstream

New creates a new Upstream to resolve names using the coredns process.

func (*Upstream) Lookup ¶

func (u *Upstream) Lookup(ctx context.Context, state request.Request, name string, typ uint16) (*dns.Msg, error)

Lookup routes lookups to our selves to make it follow the plugin chain *again*, but with a (possibly) new query. As we are doing the query against ourselves again, there is no actual new hop, as such RFC 6891 does not apply and we need the EDNS0 option present in the *original* query to be present here too.

Source Files ¶

View all Source files

upstream.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL