[GHSA] GHSA-5rw4-4665-cvwf (medium) — Froxlor DomainZones.add allows DNS zone-file RR injection via record/type fields

GHSA-5rw4-4665-cvwf Severity: medium CVE: CVE-2026-54543

Froxlor DomainZones.add allows DNS zone-file RR injection via record/type fields

Froxlor's DomainZones.add API command accepts user-controlled DNS record and type values and later writes them into generated BIND zone files without rejecting line delimiters, tab characters, or zone-file comment delimiters.

The stronger variant is in record