The dnslib package through 0.9.16 for Python does not verify that the ID value in a DNS reply matches an ID value in a query.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-22846.json"