Only the latest release gets fixes.
Report vulnerabilities privately through GitHub's "Report a vulnerability" button on the Security tab. Do not open a public issue.
Include the version, the configuration that triggers it and a reproducer if you have one.
- Crashes or memory errors reachable from a DNS query on UDP or TCP
- Answers forwarded to a client that do not match its query
- Bypass of the rate limiter, seccomp filter or privilege drop
- TLS certificate checks skipped while
CHECK_CERTis on