0xERR0R vulnerabilities

Products

• github.com/0xERR0R/blocky 1

Latest 0xERR0R CVEs

Newest publication first

1. GHSA-x845-2f78-7v36 Blocky DNSSEC validation bypass and validation-cache scope pollution

   Published 2026-06-19

   High·CVSS 8.6

   Summary Blocky accepts and caches forged DNS answers while dnssec.validate: true is enabled. The issue has two related exploit paths: Basic DNSSEC validation bypass. If an untrusted upstream returns an unsigned positive answer for a DNSSEC-signed public domain, Blocky classifies...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.