github.com/coredns/coredns vulnerabilities
CVEs whose affected-version data names the github.com/coredns/coredns package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-62994Low· 3.7CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin
CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin
▾ Sunlitcoredns · github.com/coredns/corednsEPSS 0.46%via OSV
CVE-2026-32934High· 7.5CoreDNS' DoQ worker pool does not bound stream backlog
CoreDNS' DoQ worker pool does not bound stream backlog
▾ Twilightcoredns · github.com/coredns/corednsEPSS 0.47%via OSV