Affected by GO-2026-4630 and 9 other vulnerabilities

GO-2026-4630: CoreDNS ACL Bypass in github.com/coredns/coredns

GO-2026-4635: CoreDNS Loop Detection Denial of Service Vulnerability in github.com/coredns/coredns

GO-2026-4969: CoreDNS' DoQ worker pool does not bound stream backlog in github.com/coredns/coredns

GO-2026-5164: CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification in github.com/coredns/coredns

GO-2026-5417: CoreDNS' transfer stanza selection uses lexicographic compare (subzone ACL bypass) in github.com/coredns/coredns

GO-2026-5583: CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC in github.com/coredns/coredns

GO-2026-5667: CoreDNS has TSIG authentication bypass on gRPC and QUIC transports in github.com/coredns/coredns

GO-2026-6506: CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP in github.com/coredns/coredns

GO-2026-6507: CoreDNS: Unauthenticated memory exhaustion in custom transports in github.com/coredns/coredns

GO-2026-6805: CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin in github.com/coredns/coredns

doh

package

v1.14.1 Latest Latest Go to latest Published: Jan 16, 2026 License: Apache-2.0 Imports: 7 Imported by: 52

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/coredns/coredns

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
func NewRequest(method, url string, m *dns.Msg) (*http.Request, error)
func RequestToMsg(req *http.Request) (*dns.Msg, error)
func ResponseToMsg(resp *http.Response) (*dns.Msg, error)

Constants ¶

View Source

const MimeType = "application/dns-message"

MimeType is the DoH mimetype that should be used.

View Source

const Path = "/dns-query"

Path is the URL path that should be used.

Variables ¶

This section is empty.

Functions ¶

func NewRequest ¶

func NewRequest(method, url string, m *dns.Msg) (*http.Request, error)

NewRequest returns a new DoH request given a HTTP method, URL and dns.Msg.

The URL should not have a path, so please exclude /dns-query. The URL will be prefixed with https:// by default, unless it's already prefixed with either http:// or https://.

func RequestToMsg ¶

func RequestToMsg(req *http.Request) (*dns.Msg, error)

RequestToMsg converts a http.Request to a dns message.

func ResponseToMsg ¶

func ResponseToMsg(resp *http.Response) (*dns.Msg, error)

ResponseToMsg converts a http.Response to a dns message.

Types ¶

This section is empty.

Source Files ¶

View all Source files

doh.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL