🎯 New Report #3795657: dns.resolveAny() Aborts the Node.js Process When a DNS Response Contains More Than 256 A Records
🔺Severity: Medium
👽 Reporter: cantina-security
⭐️ Reputation: 2422
🛠 State: resolved
💼 Team: Node.js
💵 Bounty: null
🕐 Submitted: 2026-06-11
⏰ Disclosed: 2026-08-28 14:16:02
📝 Summary: A flaw in Node.js was discovered where the dns.resolveAny() function aborted the Node.js process when a DNS response contained more than 256 A records.
📂 Report JSON File: 3795657
@hackeronereports