[ Vendor · 1 CVEs ]
coredns
CVEs affecting coredns published in the last 30 days, plus any coredns CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-62994 | 16 Jul 2026 | CVSS 3.7 | CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` pluginCoreDNS is a DNS server written in Go. From 1.9.4 until 1.14.5, a network DNS client allowed to request AXFR for a CoreDNS zone can trigger a panic… | Fix |