coredns vulnerabilities

Known vulnerabilities in the coredns package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
L GHSA-mh63-6h87-95cp	<1.12.0-r9
L CVE-2025-22868	<1.12.0-r9
L GHSA-93mq-9ffx-83m2	<1.12.0-r9
L Allocation of Resources Without Limits or Throttling	<1.12.0-r9
L Asymmetric Resource Consumption (Amplification)	<1.12.0-r9
L CVE-2024-24784	<1.12.0-r8
L GHSA-fgq5-q76c-gx78	<1.12.0-r8
L GHSA-j6m3-gc37-6r6q	<1.12.0-r8
L GHSA-32ch-6x54-q4h9	<1.12.0-r8
L CVE-2023-45289	<1.12.0-r8
L GHSA-rr6r-cfgf-gc6h	<1.12.0-r8
L CVE-2024-24786	<1.12.0-r8
L CVE-2023-45290	<1.12.0-r8
L CVE-2024-24785	<1.12.0-r8
L GHSA-8r3f-844c-mc37	<1.12.0-r8
L CVE-2024-24783	<1.12.0-r8
L GHSA-3q2c-pvp5-3cqp	<1.12.0-r8
L CVE-2025-22870	<1.12.0-r8
L GHSA-qxp5-gwg8-xv66	<1.12.0-r8
L CVE-2025-22869	<1.12.0-r7
L CVE-2025-22866	<1.12.0-r5
L GHSA-3whm-j4xm-rv8x	<1.12.0-r5
L GHSA-3f6r-qh9c-x6mm	<1.12.0-r4
L CVE-2024-45336	<1.12.0-r4
L CVE-2024-45341	<1.12.0-r4
L GHSA-7wrw-r4p8-38rx	<1.12.0-r4
L GHSA-w32m-9786-jp63	<1.12.0-r3
L CVE-2024-45338	<1.12.0-r3
L GHSA-v778-237x-gjrc	<1.12.0-r2
L CVE-2024-45337	<1.12.0-r2
L Insufficient Verification of Data Authenticity	<1.12.0-r1
L GHSA-px8v-pp82-rcvr	<1.12.0-r1
L GHSA-29wx-vh33-7x7r	<1.11.3-r8
L Improper Handling of Exceptional Conditions	<1.11.3-r8
L GHSA-j7vj-rw65-4v26	<1.11.3-r7
L GHSA-8xfx-rj4p-23jm	<1.11.3-r7
L CVE-2024-34155	<1.11.3-r7
L CVE-2024-34158	<1.11.3-r7
L CVE-2024-34156	<1.11.3-r7
L GHSA-crqm-pwhx-j97f	<1.11.3-r7
L GHSA-hw49-2p59-3mhj	<1.11.3-r3
L CVE-2024-24791	<1.11.3-r3
L GHSA-49gw-vxvf-fc2g	<1.11.3-r2
L GHSA-236w-p7wf-5ph8	<1.11.3-r2
C CVE-2024-24790	<1.11.3-r2
M CVE-2024-24789	<1.11.3-r2
L CVE-2024-24787	<1.11.3-r1
L GHSA-2jwv-jmq4-4j3r	<1.11.3-r1
L CVE-2024-24788	<1.11.3-r1
L GHSA-5fq7-4mxc-535h	<1.11.3-r1
L GHSA-4v7x-pqxf-cx7m	<1.11.3-r0
L CVE-2023-45288	<1.11.3-r0
L GHSA-c33x-xqrf-c478	<1.11.1-r12
L CVE-2024-22189	<1.11.1-r12
L GHSA-ppxx-5m9h-6vxf	<1.11.1-r10
M Resource Exhaustion	<1.11.1-r10
L GHSA-45x7-px36-x8w8	<1.11.1-r9
M Improper Validation of Integrity Check Value	<1.11.1-r9
L GHSA-m425-mq94-257g	<1.11.1-r6
L GHSA-2wrh-6pvc-2jm9	<1.11.1-r5
L GHSA-qppj-fm5r-hxr3	<1.11.1-r6
L GHSA-4374-p667-p6c8	<1.11.1-r5
H Allocation of Resources Without Limits or Throttling	<1.11.1-r5
H CVE-2023-44487	<1.11.1-r6
M Cross-site Scripting (XSS)	<1.11.1-r5

Vulnerability

Vulnerable Version

GHSA-mh63-6h87-95cp

<1.12.0-r9

CVE-2025-22868

<1.12.0-r9

GHSA-93mq-9ffx-83m2

<1.12.0-r9

Allocation of Resources Without Limits or Throttling

<1.12.0-r9

Asymmetric Resource Consumption (Amplification)

<1.12.0-r9