—
GO-2026-5583
CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC in github.com/coredns/coredns
Quick fix
GO-2026-5583 — github.com/coredns/coredns: upgrade to the fixed version with the command below.
go get github.com/coredns/coredns@v1.14.3Details
CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC in github.com/coredns/coredns
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/coredns/coredns
Introduced in:
0Fixed in: 1.14.3Fix
go get github.com/coredns/coredns@v1.14.3