RUSTSEC-2026-0118: NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses
Open
- Dominant language
- Rust
- Stars
- 56.8k
- Forks
- 2.9k
- Avg merge
- 2d 9h
- Merged PRs (30d)
- 5
Description
https://github.com/hickory-dns/hickory-dns/security/advisories/GHSA-3v94-mw7p-v465
Contributor guide
Research direction
Read the linked Hickory DNS security advisory first. The issue names no file, test, affected dependency version, or requested remediation, so identify how the advisory applies to fuel-core and clarify the intended fix and completion criteria before implementation.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rust
- Domain
- networking, security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100