# CoreDNS v1.14.0

- Product: CoreDNS (https://whatsnew.fyi/product/coredns)
- Vendor: CNCF
- Date: 2026-01-08
- Version: v1.14.0
- Original notes: https://github.com/coredns/coredns/releases/tag/v1.14.0
- Permalink: https://whatsnew.fyi/product/coredns/releases/v1.14.0

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **fixed** — Fix gosec G115 integer overflow warnings in core
- **added** — Add regex length limit to core to reduce resource-exhaustion risk
- **fixed** — Fix slice init length in azure plugin
- **added** — Add optional show_first flag to errors plugin consolidate directive
- **fixed** — Fix misleading SOA parser warnings in file plugin
- **added** — Add rate limits to Kubernetes API server in kubernetes plugin
- **added** — Implement plugin chain tracking in metrics plugin
- **fixed** — Report parser error before missing SOA in sign plugin
- **security** — Additional security fixes included in this release

This release focuses on security hardening and operational reliability. Core updates
introduce a regex length limit to reduce resource-exhaustion risk. Plugin updates
improve error consolidation (`show_first`), reduce misleading SOA warnings, add
Kubernetes API rate limiting, enhance metrics with plugin chain tracking, and fix
issues in azure and sign. This release also includes additional security fixes;
see the security advisory for details.

##### Brought to You By

cangming
pasteley
Raisa Kabir
Ross Golder
rusttech
Syed Azeez
Ville Vesilehto
Yong Tang

##### Noteworthy Changes

* core: Fix gosec G115 integer overflow warnings (https://github.com/coredns/coredns/pull/7799)
* core: Add regex length limit (https://github.com/coredns/coredns/pull/7802)
* plugin/azure: Fix slice init length (https://github.com/coredns/coredns/pull/6901)
* plugin/errors: Add optional `show_first` flag to consolidate directive (https://github.com/coredns/coredns/pull/7703)
* plugin/file: Fix for misleading SOA parser warnings (https://github.com/coredns/coredns/pull/7774)
* plugin/kubernetes: Rate limits to api server (https://github.com/coredns/coredns/pull/7771)
* plugin/metrics: Implement plugin chain tracking (https://github.com/coredns/coredns/pull/7791)
* plugin/sign: Report parser err before missing SOA (https://github.com/coredns/coredns/pull/7775)