Thats a long list :) There is a 10 in amongst that lot also. In case anyone is interested
+------+-------------------------------+-------+----------+---------+ | CVE | Summary | CVSS4 | Severity | Age | +------+-------------------------------+-------+----------+---------+ | 14586| DoQ timestamp assertion -> DoS| — | Medium | 101 days| | 32665| DoQ accounting bypass -> DoS | — | High | 101 days| | 32792| Malformed DNSCrypt query | 8.2 | High | 133 days| | 33278| DNSSEC pointer; RCE/DoS | 10.0 | Critical | 133 days| | 40622| Ghost-domain cached NS TTL | 8.7 | High | 133 days| | 40691| DNSCrypt/TCP heap overflow | — | High | 101 days| | 41292| Excessive EDNS options -> DoS | 8.7 | High | 133 days| | 41637| DoQ termination wait counts | — | Low | 101 days| | 42534| Retransmits bypass jostle | 6.9 | Medium | 133 days| | 42923| NSEC3 hashing resource DoS | 6.9 | Medium | 133 days| | 42944| EDNS heap overflow -> crash | 8.7 | High | 133 days| | 42955| Ghost-domain cached glue TTL | — | Low | 101 days| | 42959| DNSSEC counter crash | 8.7 | High | 133 days| | 42960| Authority records cache poison| 7.1 | High | 133 days| | 44390| Large RRsets compression DoS | 6.9 | Medium | 133 days| | 44608| RPZ XFR use-after-free | 8.2 | High | 133 days| | 44621| libunbound allow-list crash | — | Medium | 101 days| | 44687| Zone shadowing via NXDOMAIN | — | Low | 101 days| | 44690| RRSIG/NSEC cache poisoning | — | High | 101 days| | 46582| Wildcard replay cache poison | — | Low | 101 days| | 50045| Deep DNSSEC names bypass quota| — | Medium | 101 days| | 50046| DoT forwarding use-after-free | — | Medium | 101 days| | 50243| BOGUS DNSSEC redirection | 6.3 | Medium | 101 days| | 50248| Spoofed RPZ primary replace | — | Medium | 101 days| | 50251| Crafted glue flushes cache | — | Medium | 101 days| | 50252| SO_REUSEPORT port weakness | 7.1 | High | 101 days| | 52863| View-name memory corruption | — | Medium | 101 days| | 54478| Proxy Protocol validation flaw| — | Low | 101 days| | 55708| View local-data bypass | — | Low | 101 days| | 55717| Serve-expired CNAME crash | — | Medium | 101 days| | 55973| EDNS error parsing -> DoS | — | High | 101 days| | 55990| DNSCrypt certificate crash | — | Medium | 101 days| | 55991| DoQ assertion abort | — | Medium | 101 days| | 56416| Malformed DNSSEC RDATA | — | Medium | 101 days| | 56444| Serve-expired accounting flaw | — | Medium | 101 days| +------+-------------------------------+-------+----------+---------+
