A bunch of vulnerabilities have been found in the Authoritative and Recursor servers. Here’s the list of security advisories: http://seclists.org/oss-sec/2017/q4/329 I’m surprised this hasn’t been mentioned on these lists yet.