Executive brief
Netfoil has incorrect allowlist enforcement
Affected products
- Go github.com/tinfoil-factory/netfoil
Junglewise Threat Intelligence
Netfoil has incorrect allowlist enforcement
Severity: medium · CVSS 4 · Published 2026-04-29
Technologies: github.com/tinfoil-factory/netfoil (Go). Vendors: Go.
Related threats
- GO-2026-6277 - netfoil vulnerable to improper handling of untrusted DoH response data in github.com/tinfoil-factory/netfoil
- netfoil vulnerable to improper handling of untrusted DoH response data
- netfoil improper output neutralization for logs in DoH response handling
- GO-2026-6143 - netfoil: Incorrect block responses could lead to localhost traffic in github.com/tinfoil-factory/netfoil
- netfoil: Incorrect block responses could lead to localhost traffic