Skip to content

Security: atnplex/coredns-unraid

SECURITY.md

Security Policy

Supported Versions

Supported means the maintainer intends to provide security fixes and critical bug fixes for the release line below.

Version / Branch Support Status
main ✅ Actively maintained
2025.x releases ✅ Supported while main remains the active development line

Reporting a Vulnerability

Please do not open a public GitHub issue for security vulnerabilities.

Report security issues privately by emailing the maintainer or opening a GitHub Security Advisory.

Security Notes

  • The CoreDNS binary is downloaded from the official GitHub releases page with SHA256 verification.
  • The Corefile is stored on the Unraid flash drive at /boot/config/plugins/coredns/config/Corefile. Restrict access to the flash drive as appropriate.
  • The plugin WebUI is only accessible to authenticated Unraid GUI users.
  • PHP endpoints use whitelisted actions and escapeshellarg() throughout.
  • Logs are written to RAM only — no sensitive data persists to flash.

There aren’t any published security advisories