Vulnerability GHSA-9ppr-wfw9-xvr2
Medium Risk
MEDIUM RISK
CVSS Score: 6.0
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
17 hours ago
November 03, 2026 at 04:48 PM UTC
Netfoil doesn't decrement TTL
v0.3.0 - v0.6.0
v0.3.0 - v0.6.0
Summary
Netfoil doesn't decrement TTL
Details
Summary
TTL was not decremented, so stale records would continue to be served.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
2 months ago
netfoil vulnerable to improper handling of untrusted DoH response data in github.com/tinfoil-factory/netfoil
v0.1.0 - v0.4.0 GO-2026-6277
v0.1.0 - v0.4.0 GO-2026-6277
Low Risk
2 months ago
netfoil vulnerable to improper handling of untrusted DoH response data
v0.1.0 - v0.4.0 GHSA-4ph6-mjv7-3fq6
v0.1.0 - v0.4.0 GHSA-4ph6-mjv7-3fq6
Unknown
2 months ago
netfoil: Incorrect block responses could lead to localhost traffic in github.com/tinfoil-factory/netfoil
v0.1.0 - v0.3.1 GO-2026-6143
v0.1.0 - v0.3.1 GO-2026-6143
High Risk
3 months ago
netfoil: Incorrect block responses could lead to localhost traffic
v0.1.0 - v0.3.1 GHSA-xvg2-cgv6-6h7v
v0.1.0 - v0.3.1 GHSA-xvg2-cgv6-6h7v
Unknown
3 months ago
netfoil has a resource leak in LRU cache in github.com/tinfoil-factory/netfoil
v0.1.0 - v0.2.1 GO-2026-5933
v0.1.0 - v0.2.1 GO-2026-5933
Impacted packages
Timeline
Published
17 hours ago
November 03, 2026 at 04:48 PM UTC
Fixed (v0.6.1)
4 months ago
June 25, 2026 at 09:01 PM UTC
Last Modified
17 hours ago
November 03, 2026 at 05:00 PM UTC