Jianjun Chen (Tsinghua University)

DNS-over-QUIC (DoQ) path-migration can lead to use-after-free on multi-threaded deployments.

Aggregate DNS name chained pointer decompression work leads to degradation of service.

Possible cache poisoning vulnerability via a cache side-channel exposed by 'unwanted-reply-threshold'

Remote DNS-over-QUIC denial of service due to `quic-size` budget bypass

Assertion in libngtcp2 when under pressure in high concurrency DNS-over-QUIC environments

Possible cache poisoning via promiscuous records for the authority section

Possible domain hijacking via promiscuous records in the authority section