Unbound 1.26.1 closes a critical heap overflow in its DNSSEC validator that a malicious DNS zone can trigger.