CVE-2022-22846: Dnslib Project Dnslib

Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days.

The dnslib package through 0.9.16 for Python does not verify that the ID value in a DNS reply matches an ID value in a query.

Affected products

• Dnslib Project Dnslib: up to and including 0.9.16

Published 2022-01-10. Last modified 2026-06-17.