—
GO-2026-6277
netfoil vulnerable to improper handling of untrusted DoH response data in github.com/tinfoil-factory/netfoil
Quick fix
GO-2026-6277 — github.com/tinfoil-factory/netfoil: upgrade to the fixed version with the command below.
go get github.com/tinfoil-factory/netfoil@v0.5.0Details
netfoil vulnerable to improper handling of untrusted DoH response data in github.com/tinfoil-factory/netfoil
Are you affected?
Enter the version of the package you're using.
Affected packages
Go / github.com/tinfoil-factory/netfoil
Introduced in:
0 Fixed in: 0.5.0 Fix
go get github.com/tinfoil-factory/netfoil@v0.5.0 References
- https://github.com/tinfoil-factory/netfoil/security/advisories/GHSA-4ph6-mjv7-3fq6 [ADVISORY]
- https://github.com/tinfoil-factory/netfoil/commit/58cfb0cb16b824e02bf53c2d67707e5e4bd9f59b [FIX]
- https://github.com/tinfoil-factory/netfoil/commit/817f664c61aa64cbe0dbfcdfc05c16602b422e5b [FIX]
- https://github.com/tinfoil-factory/netfoil/releases/tag/v0.5.0 [WEB]