CVE-2021-23386

CVE-2021-23386 is a medium-severity vulnerability affecting the dns-packet package prior to version 5.2.2. It stems from the improper use of allocUnsafe to create buffers, which are not always fully initialized before forming network packets. This flaw could lead to the exposure of internal application memory over unencrypted networks when processing specially crafted, invalid domain names. While the CVSS score is 6.5, indicating a high confidentiality impact, there is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.