Skip to content
OpenAdvisories

Package · Go

github.com/0xERR0R/blocky

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    GHSA-x845-2f78-7v36

    Blocky DNSSEC validation bypass and validation-cache scope pollution

    ## Summary Blocky accepts and caches forged DNS answers while `dnssec.validate: true` is enabled. The issue has two related exploit paths: 1. **Basic DNSSEC validation bypass.** If an untrusted upstream returns an unsigned positive answer for a DNSSEC-signed …

    github.com/0xERR0R/blocky Go