https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 16:35:06 +0000 https://vulnerability.circl.lu/vuln/cve-2026-24029 <p><strong>Affected:</strong> PowerDNS DNSdist</p> <p>When the early_acl_drop (earlyACLDrop in Lua) option is disabled (default is enabled) on a DNS over HTTPs frontend using the nghttp2 provider, the ACL check is skipped, allowing all clients to send DoH queries regardless of the configured ACL.</p> <p><strong>Affected:</strong> PowerDNS DNSdist</p> <p>When the early_acl_drop (earlyACLDrop in Lua) option is disabled (default is enabled) on a DNS over HTTPs frontend using the nghttp2 provider, the ACL check is skipped, allowing all clients to send DoH queries regardless of the configured ACL.</p> https://vulnerability.circl.lu/vuln/cve-2026-24029 https://vulnerability.circl.lu/vuln/ghsa-hh36-f69g-hq4h <p>When the early_acl_drop (earlyACLDrop in Lua) option is disabled (default is enabled) on a DNS over HTTPs frontend using the nghttp2 provider, the ACL check is skipped, allowing all clients to send DoH queries regardless of the configured ACL.</p> <p>When the early_acl_drop (earlyACLDrop in Lua) option is disabled (default is enabled) on a DNS over HTTPs frontend using the nghttp2 provider, the ACL check is skipped, allowing all clients to send DoH queries regardless of the configured ACL.</p> https://vulnerability.circl.lu/vuln/ghsa-hh36-f69g-hq4h