{"id":"GO-2024-2785","revision":"663db47eaed64f818cd62e757b1cc761","records":[{"revision":"663db47eaed64f818cd62e757b1cc761","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2024-2785","aliases":["CVE-2024-0874","GHSA-m9w6-wp3h-vq8g"],"title":"CoreDNS may return invalid cache entries in github.com/coredns/coredns","description":"A flaw was found in coredns. This issue could lead to invalid cache entries returning due to incorrectly implemented caching.","state":0,"publishedAt":"2024-06-04T15:19:21+00:00","modifiedAt":"2026-02-04T03:15:08.811082+00:00","affected":[{"ecosystem":"Go","name":"github.com/coredns/coredns","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.11.2"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/advisories/GHSA-m9w6-wp3h-vq8g","https://github.com/coredns/coredns/commit/997c7f953962d47c242273f0e41398fdfb5b0151","https://github.com/coredns/coredns/pull/6354","https://github.com/coredns/coredns/issues/6186","https://access.redhat.com/errata/RHSA-2024:0041","https://access.redhat.com/security/cve/CVE-2024-0874","https://bugzilla.redhat.com/show_bug.cgi?id=2219234"],"sourceUrl":"https://osv.dev/vulnerability/GO-2024-2785","license":"OSV · upstream source license applies","key":"osv:GO-2024-2785","identifiers":["GO-2024-2785","CVE-2024-0874","GHSA-m9w6-wp3h-vq8g"]},"retained":false,"historicalAffected":[]}],"coverage":[]}