{"schema_version":1,"title":"NLnet Labs NSD vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 4 vulnerabilities in NLnet Labs NSD: 0 in the last 7 days and 4 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-101341, was published on 14 October 2026. 4 vulnerabilities in the last four weeks, up from none in the four before.","url":"https://junglewise.ai/threats/technologies/nlnet-labs-nsd","json_url":"https://junglewise.ai/threats/technologies/nlnet-labs-nsd.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/nlnet-labs-nsd","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":0,"all_time":4,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":4,"last_90_days":4,"last_365_days":4},"latest":[{"cve":"CVE-2026-101341","epss":0.0034,"slug":"cve-2026-101341-tokens-of-text-in-rdata-of-for-example-txt-records-under-32","title":"NSD stack buffer overflow in RDATA parsing","severity":"info","exploited":false,"published_at":"2026-10-14T11:16:57.423+00:00","url":"https://junglewise.ai/threats/cve-2026-101341-tokens-of-text-in-rdata-of-for-example-txt-records-under-32"},{"cve":"CVE-2026-101339","epss":0.0032,"slug":"cve-2026-101339-a-hip-resource-record-that-fills-the-rdata-near-or-at-is-limit","title":"NSD stack overflow in HIP resource record parsing","severity":"info","exploited":false,"published_at":"2026-10-14T11:16:57.3+00:00","url":"https://junglewise.ai/threats/cve-2026-101339-a-hip-resource-record-that-fills-the-rdata-near-or-at-is-limit"},{"cve":"CVE-2026-101338","epss":0.0032,"slug":"cve-2026-101338-when-a-svcb-or-https-rr-has-filled-the-wire-format-rdata-up-to","title":"NSD stack buffer overflow in SVCB/HTTPS record parsing","severity":"info","exploited":false,"published_at":"2026-10-14T11:16:57.13+00:00","url":"https://junglewise.ai/threats/cve-2026-101338-when-a-svcb-or-https-rr-has-filled-the-wire-format-rdata-up-to"},{"cve":"CVE-2026-101337","epss":0.0032,"slug":"cve-2026-101337-when-base64-data-is-split-up-in-pieces-of-3-character-or-less","title":"NSD stack buffer overflow in base64 RDATA parsing","severity":"info","exploited":false,"published_at":"2026-10-14T11:16:56.89+00:00","url":"https://junglewise.ai/threats/cve-2026-101337-when-base64-data-is-split-up-in-pieces-of-3-character-or-less"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":4},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"NLnet Labs Unbound","slug":"unbound","vulnerabilities":46,"url":"https://junglewise.ai/threats/technologies/unbound"},{"name":"NLnet Labs Routinator","slug":"routinator","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/routinator"},{"name":"NLnet Labs Krill","slug":"krill","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/krill"}],"technology":{"hub":true,"name":"NLnet Labs NSD","slug":"nlnet-labs-nsd","vendor":{"hub":true,"name":"NLnet Labs","slug":"nlnet-labs","url":"https://junglewise.ai/threats/vendors/nlnet-labs"},"aliases":[],"category":"dns-server","description":"DNS server implementation maintained by NLnet Labs for domain name resolution.","url":"https://junglewise.ai/threats/technologies/nlnet-labs-nsd"},"most_severe":[{"cve":"CVE-2026-101341","epss":0.0034,"slug":"cve-2026-101341-tokens-of-text-in-rdata-of-for-example-txt-records-under-32","title":"NSD stack buffer overflow in RDATA parsing","severity":"info","exploited":false,"published_at":"2026-10-14T11:16:57.423+00:00","url":"https://junglewise.ai/threats/cve-2026-101341-tokens-of-text-in-rdata-of-for-example-txt-records-under-32"},{"cve":"CVE-2026-101339","epss":0.0032,"slug":"cve-2026-101339-a-hip-resource-record-that-fills-the-rdata-near-or-at-is-limit","title":"NSD stack overflow in HIP resource record parsing","severity":"info","exploited":false,"published_at":"2026-10-14T11:16:57.3+00:00","url":"https://junglewise.ai/threats/cve-2026-101339-a-hip-resource-record-that-fills-the-rdata-near-or-at-is-limit"},{"cve":"CVE-2026-101338","epss":0.0032,"slug":"cve-2026-101338-when-a-svcb-or-https-rr-has-filled-the-wire-format-rdata-up-to","title":"NSD stack buffer overflow in SVCB/HTTPS record parsing","severity":"info","exploited":false,"published_at":"2026-10-14T11:16:57.13+00:00","url":"https://junglewise.ai/threats/cve-2026-101338-when-a-svcb-or-https-rr-has-filled-the-wire-format-rdata-up-to"},{"cve":"CVE-2026-101337","epss":0.0032,"slug":"cve-2026-101337-when-base64-data-is-split-up-in-pieces-of-3-character-or-less","title":"NSD stack buffer overflow in base64 RDATA parsing","severity":"info","exploited":false,"published_at":"2026-10-14T11:16:56.89+00:00","url":"https://junglewise.ai/threats/cve-2026-101337-when-base64-data-is-split-up-in-pieces-of-3-character-or-less"}],"generated_at":"2026-11-09T03:07:00.176479+00:00"}