{"schema_version":1,"title":"github.com/tinfoil-factory/netfoil (Go) vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 19 vulnerabilities in github.com/tinfoil-factory/netfoil (Go): 0 in the last 7 days and 15 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, GO-2026-6277 - netfoil vulnerable to improper handling of untrusted DoH…, was published on 25 August 2026.","url":"https://junglewise.ai/threats/technologies/github-com-tinfoil-factory-netfoil","json_url":"https://junglewise.ai/threats/technologies/github-com-tinfoil-factory-netfoil.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/github-com-tinfoil-factory-netfoil","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":1,"all_time":19,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":15,"last_365_days":19},"latest":[{"slug":"go-2026-6277-netfoil-vulnerable-to-improper-handling-of-untrusted-doh-3c188b0a","title":"GO-2026-6277 - netfoil vulnerable to improper handling of untrusted DoH response data in github.com/tinfoil-factory/netfoil","severity":"info","exploited":false,"published_at":"2026-08-25T19:43:10+00:00","url":"https://junglewise.ai/threats/go-2026-6277-netfoil-vulnerable-to-improper-handling-of-untrusted-doh-3c188b0a"},{"cvss":2.7,"slug":"netfoil-improper-output-neutralization-for-logs-in-doh-response-c6a8161c","title":"netfoil improper output neutralization for logs in DoH response handling","severity":"low","exploited":false,"published_at":"2026-08-24T20:43:08+00:00","url":"https://junglewise.ai/threats/netfoil-improper-output-neutralization-for-logs-in-doh-response-c6a8161c"},{"cvss":4,"slug":"netfoil-vulnerable-to-improper-handling-of-untrusted-doh-response-data-afd823c6","title":"netfoil vulnerable to improper handling of untrusted DoH response data","severity":"medium","exploited":false,"published_at":"2026-08-24T20:43:08+00:00","url":"https://junglewise.ai/threats/netfoil-vulnerable-to-improper-handling-of-untrusted-doh-response-data-afd823c6"},{"slug":"go-2026-6143-netfoil-incorrect-block-responses-could-lead-to-localhost-10a9eea0","title":"GO-2026-6143 - netfoil: Incorrect block responses could lead to localhost traffic in github.com/tinfoil-factory/netfoil","severity":"info","exploited":false,"published_at":"2026-08-18T14:32:29+00:00","url":"https://junglewise.ai/threats/go-2026-6143-netfoil-incorrect-block-responses-could-lead-to-localhost-10a9eea0"},{"cvss":4,"slug":"netfoil-incorrect-block-responses-could-lead-to-localhost-traffic-780e1afe","title":"netfoil: Incorrect block responses could lead to localhost traffic","severity":"medium","exploited":false,"published_at":"2026-07-29T17:03:48+00:00","url":"https://junglewise.ai/threats/netfoil-incorrect-block-responses-could-lead-to-localhost-traffic-780e1afe"},{"cvss":7.4,"slug":"tinfoil-factory-netfoil-protection-mechanism-failure-in-dns-block-e16a1288","title":"tinfoil-factory netfoil protection mechanism failure in DNS block responses","severity":"high","exploited":false,"published_at":"2026-07-29T17:03:48+00:00","url":"https://junglewise.ai/threats/tinfoil-factory-netfoil-protection-mechanism-failure-in-dns-block-e16a1288"},{"slug":"go-2026-5933-netfoil-has-a-resource-leak-in-lru-cache-in-github-com-49c2bca1","title":"GO-2026-5933 - netfoil has a resource leak in LRU cache in github.com/tinfoil-factory/netfoil","severity":"info","exploited":false,"published_at":"2026-07-17T19:42:05+00:00","url":"https://junglewise.ai/threats/go-2026-5933-netfoil-has-a-resource-leak-in-lru-cache-in-github-com-49c2bca1"},{"slug":"go-2026-5935-netfoil-attacker-controlled-data-written-to-logs-in-github-a3f89afc","title":"GO-2026-5935 - netfoil: Attacker controlled data written to logs in github.com/tinfoil-factory/netfoil","severity":"info","exploited":false,"published_at":"2026-07-17T19:42:05+00:00","url":"https://junglewise.ai/threats/go-2026-5935-netfoil-attacker-controlled-data-written-to-logs-in-github-a3f89afc"},{"slug":"go-2026-5934-netfoil-has-a-domain-name-filter-bypass-via-multiple-f640dc92","title":"GO-2026-5934 - netfoil has a domain name filter bypass via multiple questions in github.com/tinfoil-factory/netfoil","severity":"info","exploited":false,"published_at":"2026-07-17T19:42:05+00:00","url":"https://junglewise.ai/threats/go-2026-5934-netfoil-has-a-domain-name-filter-bypass-via-multiple-f640dc92"},{"cvss":4,"slug":"netfoil-attacker-controlled-data-written-to-logs-7997d861","title":"netfoil: Attacker controlled data written to logs","severity":"medium","exploited":false,"published_at":"2026-07-07T20:04:22+00:00","url":"https://junglewise.ai/threats/netfoil-attacker-controlled-data-written-to-logs-7997d861"},{"cvss":2.3,"slug":"tinfoil-factory-netfoil-log-injection-via-unvalidated-domain-names-020d7d32","title":"Tinfoil Factory netfoil log injection via unvalidated domain names","severity":"low","exploited":false,"published_at":"2026-07-07T20:04:22+00:00","url":"https://junglewise.ai/threats/tinfoil-factory-netfoil-log-injection-via-unvalidated-domain-names-020d7d32"},{"cvss":4,"slug":"netfoil-has-a-resource-leak-in-lru-cache-1f8adf03","title":"netfoil has a resource leak in LRU cache","severity":"medium","exploited":false,"published_at":"2026-07-07T20:04:01+00:00","url":"https://junglewise.ai/threats/netfoil-has-a-resource-leak-in-lru-cache-1f8adf03"},{"cvss":1.2,"slug":"tinfoil-factory-netfoil-resource-leak-in-lru-cache-b447cb08","title":"tinfoil-factory netfoil resource leak in LRU cache","severity":"low","exploited":false,"published_at":"2026-07-07T20:04:01+00:00","url":"https://junglewise.ai/threats/tinfoil-factory-netfoil-resource-leak-in-lru-cache-b447cb08"},{"cvss":5.9,"slug":"tinfoil-factory-netfoil-domain-name-filter-bypass-via-multiple-72d002ff","title":"tinfoil-factory netfoil domain name filter bypass via multiple questions","severity":"medium","exploited":false,"published_at":"2026-07-07T20:03:49+00:00","url":"https://junglewise.ai/threats/tinfoil-factory-netfoil-domain-name-filter-bypass-via-multiple-72d002ff"},{"cvss":4,"slug":"netfoil-has-a-domain-name-filter-bypass-via-multiple-questions-0ba8cee3","title":"netfoil has a domain name filter bypass via multiple questions","severity":"medium","exploited":false,"published_at":"2026-07-07T20:03:49+00:00","url":"https://junglewise.ai/threats/netfoil-has-a-domain-name-filter-bypass-via-multiple-questions-0ba8cee3"},{"slug":"go-2026-5664-netfoil-s-optional-seccomp-sandboxing-was-not-applied-in-28a6beb2","title":"GO-2026-5664 - netfoil's optional seccomp sandboxing was not applied in github.com/tinfoil-factory/netfoil","severity":"info","exploited":false,"published_at":"2026-06-25T22:34:38+00:00","url":"https://junglewise.ai/threats/go-2026-5664-netfoil-s-optional-seccomp-sandboxing-was-not-applied-in-28a6beb2"},{"slug":"go-2026-5240-netfoil-has-incorrect-allowlist-enforcement-in-github-com-bf798f5b","title":"GO-2026-5240 - Netfoil has incorrect allowlist enforcement in github.com/tinfoil-factory/netfoil","severity":"info","exploited":false,"published_at":"2026-06-25T18:43:15+00:00","url":"https://junglewise.ai/threats/go-2026-5240-netfoil-has-incorrect-allowlist-enforcement-in-github-com-bf798f5b"},{"cvss":4,"slug":"netfoil-s-optional-seccomp-sandboxing-was-not-applied-dee679b9","title":"netfoil's optional seccomp sandboxing was not applied","severity":"medium","exploited":false,"published_at":"2026-04-29T22:23:41+00:00","url":"https://junglewise.ai/threats/netfoil-s-optional-seccomp-sandboxing-was-not-applied-dee679b9"},{"cvss":4,"slug":"netfoil-has-incorrect-allowlist-enforcement-b5e0d890","title":"Netfoil has incorrect allowlist enforcement","severity":"medium","exploited":false,"published_at":"2026-04-29T22:22:16+00:00","url":"https://junglewise.ai/threats/netfoil-has-incorrect-allowlist-enforcement-b5e0d890"}],"weekly":[{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":6},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"github.com/mattermost/mattermost-server (Go)","slug":"github-com-mattermost-mattermost-server","vulnerabilities":274,"url":"https://junglewise.ai/threats/technologies/github-com-mattermost-mattermost-server"},{"name":"github.com/mattermost/mattermost-server/v6 (Go)","slug":"github-com-mattermost-mattermost-server-v6","vulnerabilities":188,"url":"https://junglewise.ai/threats/technologies/github-com-mattermost-mattermost-server-v6"},{"name":"github.com/mattermost/mattermost-server/v5 (Go)","slug":"github-com-mattermost-mattermost-server-v5","vulnerabilities":186,"url":"https://junglewise.ai/threats/technologies/github-com-mattermost-mattermost-server-v5"},{"name":"github.com/mattermost/mattermost/server/v8 (Go)","slug":"github-com-mattermost-mattermost-server-v8","vulnerabilities":182,"url":"https://junglewise.ai/threats/technologies/github-com-mattermost-mattermost-server-v8"},{"name":"stdlib (Go)","slug":"go-stdlib","vulnerabilities":161,"url":"https://junglewise.ai/threats/technologies/go-stdlib"},{"name":"github.com/siyuan-note/siyuan/kernel (Go)","slug":"github-com-siyuan-note-siyuan-kernel","vulnerabilities":158,"url":"https://junglewise.ai/threats/technologies/github-com-siyuan-note-siyuan-kernel"},{"name":"code.gitea.io/gitea (Go)","slug":"code-gitea-io-gitea","vulnerabilities":128,"url":"https://junglewise.ai/threats/technologies/code-gitea-io-gitea"},{"name":"gogs.io/gogs (Go)","slug":"gogs-io-gogs","vulnerabilities":82,"url":"https://junglewise.ai/threats/technologies/gogs-io-gogs"},{"name":"github.com/traefik/traefik (Go)","slug":"github-com-traefik-traefik","vulnerabilities":75,"url":"https://junglewise.ai/threats/technologies/github-com-traefik-traefik"},{"name":"github.com/usememos/memos (Go)","slug":"github-com-usememos-memos","vulnerabilities":75,"url":"https://junglewise.ai/threats/technologies/github-com-usememos-memos"},{"name":"github.com/traefik/traefik/v2 (Go)","slug":"github-com-traefik-traefik-v2","vulnerabilities":73,"url":"https://junglewise.ai/threats/technologies/github-com-traefik-traefik-v2"},{"name":"github.com/traefik/traefik/v3 (Go)","slug":"github-com-traefik-traefik-v3","vulnerabilities":68,"url":"https://junglewise.ai/threats/technologies/github-com-traefik-traefik-v3"}],"technology":{"hub":true,"name":"github.com/tinfoil-factory/netfoil (Go)","slug":"github-com-tinfoil-factory-netfoil","vendor":{"name":"Go","slug":"go","url":"https://junglewise.ai/threats/vendors/go"},"aliases":[],"repo_url":"https://github.com/tinfoil-factory/netfoil","description":"A Go package providing networking utilities and protocol implementations.","url":"https://junglewise.ai/threats/technologies/github-com-tinfoil-factory-netfoil"},"most_severe":[{"cvss":7.4,"slug":"tinfoil-factory-netfoil-protection-mechanism-failure-in-dns-block-e16a1288","title":"tinfoil-factory netfoil protection mechanism failure in DNS block responses","severity":"high","exploited":false,"published_at":"2026-07-29T17:03:48+00:00","url":"https://junglewise.ai/threats/tinfoil-factory-netfoil-protection-mechanism-failure-in-dns-block-e16a1288"},{"cvss":5.9,"slug":"tinfoil-factory-netfoil-domain-name-filter-bypass-via-multiple-72d002ff","title":"tinfoil-factory netfoil domain name filter bypass via multiple questions","severity":"medium","exploited":false,"published_at":"2026-07-07T20:03:49+00:00","url":"https://junglewise.ai/threats/tinfoil-factory-netfoil-domain-name-filter-bypass-via-multiple-72d002ff"},{"cvss":4,"slug":"netfoil-vulnerable-to-improper-handling-of-untrusted-doh-response-data-afd823c6","title":"netfoil vulnerable to improper handling of untrusted DoH response data","severity":"medium","exploited":false,"published_at":"2026-08-24T20:43:08+00:00","url":"https://junglewise.ai/threats/netfoil-vulnerable-to-improper-handling-of-untrusted-doh-response-data-afd823c6"},{"cvss":4,"slug":"netfoil-incorrect-block-responses-could-lead-to-localhost-traffic-780e1afe","title":"netfoil: Incorrect block responses could lead to localhost traffic","severity":"medium","exploited":false,"published_at":"2026-07-29T17:03:48+00:00","url":"https://junglewise.ai/threats/netfoil-incorrect-block-responses-could-lead-to-localhost-traffic-780e1afe"},{"cvss":4,"slug":"netfoil-attacker-controlled-data-written-to-logs-7997d861","title":"netfoil: Attacker controlled data written to logs","severity":"medium","exploited":false,"published_at":"2026-07-07T20:04:22+00:00","url":"https://junglewise.ai/threats/netfoil-attacker-controlled-data-written-to-logs-7997d861"},{"cvss":4,"slug":"netfoil-has-a-resource-leak-in-lru-cache-1f8adf03","title":"netfoil has a resource leak in LRU cache","severity":"medium","exploited":false,"published_at":"2026-07-07T20:04:01+00:00","url":"https://junglewise.ai/threats/netfoil-has-a-resource-leak-in-lru-cache-1f8adf03"},{"cvss":4,"slug":"netfoil-has-a-domain-name-filter-bypass-via-multiple-questions-0ba8cee3","title":"netfoil has a domain name filter bypass via multiple questions","severity":"medium","exploited":false,"published_at":"2026-07-07T20:03:49+00:00","url":"https://junglewise.ai/threats/netfoil-has-a-domain-name-filter-bypass-via-multiple-questions-0ba8cee3"},{"cvss":4,"slug":"netfoil-s-optional-seccomp-sandboxing-was-not-applied-dee679b9","title":"netfoil's optional seccomp sandboxing was not applied","severity":"medium","exploited":false,"published_at":"2026-04-29T22:23:41+00:00","url":"https://junglewise.ai/threats/netfoil-s-optional-seccomp-sandboxing-was-not-applied-dee679b9"},{"cvss":4,"slug":"netfoil-has-incorrect-allowlist-enforcement-b5e0d890","title":"Netfoil has incorrect allowlist enforcement","severity":"medium","exploited":false,"published_at":"2026-04-29T22:22:16+00:00","url":"https://junglewise.ai/threats/netfoil-has-incorrect-allowlist-enforcement-b5e0d890"},{"cvss":2.7,"slug":"netfoil-improper-output-neutralization-for-logs-in-doh-response-c6a8161c","title":"netfoil improper output neutralization for logs in DoH response handling","severity":"low","exploited":false,"published_at":"2026-08-24T20:43:08+00:00","url":"https://junglewise.ai/threats/netfoil-improper-output-neutralization-for-logs-in-doh-response-c6a8161c"}],"generated_at":"2026-09-28T03:07:00.154823+00:00"}