coredns.io
8 known vulnerabilities affecting coredns.io products.
Products
Vulnerabilities by priority
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-35579 | High | 0.5% | 9.8 | CoreDNS is a DNS server written in Go. In versions prior to 1.14.3, the gRPC, QU… | |
| CVE-2026-32936 | Medium | 0.7% | 7.5 | CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the DN… | |
| CVE-2026-62309 | Medium | 0.7% | 7.5 | CoreDNS is a DNS server written in Go. Prior to 1.14.4, a single 28-byte UDP dat… | |
| CVE-2026-32934 | Medium | 0.5% | 7.5 | CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the DN… | |
| CVE-2026-33489 | Medium | 0.4% | 7.5 | CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the tr… | |
| CVE-2026-33190 | Medium | 0.4% | 7.5 | CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the ts… | |
| CVE-2026-62299 | Low | 0.5% | 5.3 | CoreDNS is a DNS server written in Go. Prior to 1.14.5, the CoreDNS rewrite plug… | |
| CVE-2026-62994 | Low | 0.5% | 3.7 | CoreDNS is a DNS server written in Go. From 1.9.4 until 1.14.5, a network DNS cl… |