GO-2026-4969
and 7 other vulnerabilities
GO-2026-4969 : CoreDNS' DoQ worker pool does not bound stream backlog in github.com/coredns/coredns
GO-2026-5164 : CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification in github.com/coredns/coredns
GO-2026-5417 : CoreDNS' transfer stanza selection uses lexicographic compare (subzone ACL bypass) in github.com/coredns/coredns
GO-2026-5583 : CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC in github.com/coredns/coredns
GO-2026-5667 : CoreDNS has TSIG authentication bypass on gRPC and QUIC transports in github.com/coredns/coredns
GO-2026-6506 : CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP in github.com/coredns/coredns
GO-2026-6507 : CoreDNS: Unauthenticated memory exhaustion in custom transports in github.com/coredns/coredns
GO-2026-6805 : CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin in github.com/coredns/coredns
Discover Packages
github.com/coredns/coredns
plugin
pkg
edns
package
Version:
v1.14.2
Opens a new window with list of versions in this module.
Published: Mar 6, 2026
License: Apache-2.0
Opens a new window with license information.
Imports: 3
Opens a new window with list of imports.
Imported by: 174
Opens a new window with list of known importers.
Documentation
¶
Package edns provides function useful for adding/inspecting OPT records to/in messages.
func SetSupportedOption(option uint16 )
SetSupportedOption adds a new supported option the set of EDNS0 options that we support. Plugins typically call
this in their setup code to signal support for a new option.
By default we support:
dns.EDNS0NSID, dns.EDNS0EXPIRE, dns.EDNS0COOKIE, dns.EDNS0TCPKEEPALIVE, dns.EDNS0PADDING. These
values are not in this map and checked directly in the server.
Size returns a normalized size based on proto.
SupportedOption returns true if the option code is supported as an extra EDNS0 option.
Version checks the EDNS version in the request. If error
is nil everything is OK and we can invoke the plugin. If non-nil, the
returned Msg is valid to be returned to the client (and should).
¶
Click to show internal directories.
Click to hide internal directories.
Affected by 
Documentation
¶
Source Files