High CVSS: 7.5 CVE-2025-59030 An attacker can trigger the removal of cached records by sending a NOTIFY query over TCP.
Medium CVSS: 5.3 CVE-2025-59029 An attacker can trigger an assertion failure by requesting crafted DNS records, waiting for them to be inserted into the records cache, then send a query with qtype set to ANY.