CoreDNS TSIG authentication bypass on gRPC, QUIC, DoH, and DoH3 transports

CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP

CoreDNS: Unauthenticated memory exhaustion in custom transports

CoreDNS: proxyproto plugin panics on PPv2 datagram with non-UDP transport — single 28-byte packet remote DoS

CoreDNS transfer plugin subzone ACL bypass via lexicographic zone comparison

CoreDNS DoH GET path missing size validation causes CPU and memory amplification

CoreDNS DNS-over-QUIC unbounded goroutine growth leads to denial of service

CoreDNS TSIG authentication bypass on encrypted DNS transports

CoreDNS Loop Detection Denial of Service Vulnerability

CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages

CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion

CoreDNS ACL Bypass

CoreDNS: rewrite-plugin EDNS0 response-revert nil-pointer panic (remote DoS) when a downstream plugin returns a response with no OPT record

CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin