Issues

• SOA serial overflow detection incorrect - RFC 1982 violation

  bug
  poyrazK/cloudDNS#249 · Filter by author poyrazK opened on May 19, 2026

• GetRecordsByNames query has no index on LOWER(name) - performance issue

  bug
  poyrazK/cloudDNS#240 · Filter by author poyrazK opened on May 19, 2026

• Recursive resolver has no forwarding loop detection

  bug
  poyrazK/cloudDNS#239 · Filter by author poyrazK opened on May 19, 2026

• ApplyZoneUpdate DELETE operations have no tenant verification

  bug
  poyrazK/cloudDNS#238 · Filter by author poyrazK opened on May 19, 2026

• AnycastManager health check state machine has TOCTOU race

  bug
  poyrazK/cloudDNS#234 · Filter by author poyrazK opened on May 19, 2026

• DNS Cookie server response uses empty string instead of client IP - RFC 7873 violation

  bug
  poyrazK/cloudDNS#230 · Filter by author poyrazK opened on May 19, 2026

• UDP worker metrics not decremented on panic

  bug
  poyrazK/cloudDNS#229 · Filter by author poyrazK opened on May 19, 2026

• sync.Pool mutex released before buffer returned - data race

  bug
  poyrazK/cloudDNS#228 · Filter by author poyrazK opened on May 19, 2026

• Health monitor semaphore blocks without select - can deadlock

  bug
  poyrazK/cloudDNS#227 · Filter by author poyrazK opened on May 19, 2026

• TCP length header allows packetLen > MaxPacketSize - bounds check missing

  bug
  poyrazK/cloudDNS#225 · Filter by author poyrazK opened on May 19, 2026

• TXT record length byte not validated against remaining data length

  bug
  poyrazK/cloudDNS#224 · Filter by author poyrazK opened on May 19, 2026

• UpdateRecord has no row-level locking - concurrent updates can race

  bug
  poyrazK/cloudDNS#223 · Filter by author poyrazK opened on May 19, 2026

• TTL only enforces minimum, no maximum - cache entries could live forever

  bug
  poyrazK/cloudDNS#216 · Filter by author poyrazK opened on May 19, 2026

• Dynamic Update prerequisite ANY/255 check has inverted logic - RFC 2136 violation

  bug
  poyrazK/cloudDNS#215 · Filter by author poyrazK opened on May 19, 2026

• IXFR serial number directly from client without sanitization

  bug
  poyrazK/cloudDNS#213 · Filter by author poyrazK opened on May 19, 2026

• Missing record content length validation - memory exhaustion risk

  bug
  poyrazK/cloudDNS#212 · Filter by author poyrazK opened on May 19, 2026

• Recursive resolver logs unescaped DNS names - log injection risk

  bug
  poyrazK/cloudDNS#211 · Filter by author poyrazK opened on May 19, 2026

• IXFR serial number directly from client without sanitization

  bug
  poyrazK/cloudDNS#210 · Filter by author poyrazK opened on May 19, 2026

• DNS Cookie can be replayed from different IP - RFC 9013 violation

  bug
  poyrazK/cloudDNS#207 · Filter by author poyrazK opened on May 19, 2026

• Dynamic Update (RFC 2136) missing IP authorization when TSIG absent

  bug
  poyrazK/cloudDNS#206 · Filter by author poyrazK opened on May 19, 2026

• TSIG validation bypassed when Resources array is empty

  bug
  poyrazK/cloudDNS#201 · Filter by author poyrazK opened on May 19, 2026