Improper input validation bugs in DNSSEC validators components in PowerDNS version 4.1.0 allow attacker in man-in-the-middle position to deny existence of some data in DNS via packet replay.
https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2018-01.html