Unbound before 1.9.5 allows an infinite loop via a compressed name in dnamepktcopy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-25040.json"