{"schema_version":1,"title":"Tinfoil Factory vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 5 vulnerabilities in Tinfoil Factory: 0 in the last 7 days and 5 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, netfoil improper output neutralization for logs in DoH response handling, was published on 24 August 2026. 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/tinfoil-factory","json_url":"https://junglewise.ai/threats/vendors/tinfoil-factory.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/tinfoil-factory","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":1,"all_time":5,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":5,"last_365_days":5},"latest":[{"cvss":2.7,"slug":"netfoil-improper-output-neutralization-for-logs-in-doh-response-c6a8161c","title":"netfoil improper output neutralization for logs in DoH response handling","severity":"low","exploited":false,"published_at":"2026-08-24T20:43:08+00:00","url":"https://junglewise.ai/threats/netfoil-improper-output-neutralization-for-logs-in-doh-response-c6a8161c"},{"cvss":7.4,"slug":"tinfoil-factory-netfoil-protection-mechanism-failure-in-dns-block-e16a1288","title":"tinfoil-factory netfoil protection mechanism failure in DNS block responses","severity":"high","exploited":false,"published_at":"2026-07-29T17:03:48+00:00","url":"https://junglewise.ai/threats/tinfoil-factory-netfoil-protection-mechanism-failure-in-dns-block-e16a1288"},{"cvss":2.3,"slug":"tinfoil-factory-netfoil-log-injection-via-unvalidated-domain-names-020d7d32","title":"Tinfoil Factory netfoil log injection via unvalidated domain names","severity":"low","exploited":false,"published_at":"2026-07-07T20:04:22+00:00","url":"https://junglewise.ai/threats/tinfoil-factory-netfoil-log-injection-via-unvalidated-domain-names-020d7d32"},{"cvss":1.2,"slug":"tinfoil-factory-netfoil-resource-leak-in-lru-cache-b447cb08","title":"tinfoil-factory netfoil resource leak in LRU cache","severity":"low","exploited":false,"published_at":"2026-07-07T20:04:01+00:00","url":"https://junglewise.ai/threats/tinfoil-factory-netfoil-resource-leak-in-lru-cache-b447cb08"},{"cvss":5.9,"slug":"tinfoil-factory-netfoil-domain-name-filter-bypass-via-multiple-72d002ff","title":"tinfoil-factory netfoil domain name filter bypass via multiple questions","severity":"medium","exploited":false,"published_at":"2026-07-07T20:03:49+00:00","url":"https://junglewise.ai/threats/tinfoil-factory-netfoil-domain-name-filter-bypass-via-multiple-72d002ff"}],"vendor":{"hub":true,"name":"Tinfoil Factory","slug":"tinfoil-factory","homepage":"https://github.com/tinfoil-factory","description":"A software developer and organization on GitHub.","url":"https://junglewise.ai/threats/vendors/tinfoil-factory"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cvss":7.4,"slug":"tinfoil-factory-netfoil-protection-mechanism-failure-in-dns-block-e16a1288","title":"tinfoil-factory netfoil protection mechanism failure in DNS block responses","severity":"high","exploited":false,"published_at":"2026-07-29T17:03:48+00:00","url":"https://junglewise.ai/threats/tinfoil-factory-netfoil-protection-mechanism-failure-in-dns-block-e16a1288"},{"cvss":5.9,"slug":"tinfoil-factory-netfoil-domain-name-filter-bypass-via-multiple-72d002ff","title":"tinfoil-factory netfoil domain name filter bypass via multiple questions","severity":"medium","exploited":false,"published_at":"2026-07-07T20:03:49+00:00","url":"https://junglewise.ai/threats/tinfoil-factory-netfoil-domain-name-filter-bypass-via-multiple-72d002ff"},{"cvss":2.7,"slug":"netfoil-improper-output-neutralization-for-logs-in-doh-response-c6a8161c","title":"netfoil improper output neutralization for logs in DoH response handling","severity":"low","exploited":false,"published_at":"2026-08-24T20:43:08+00:00","url":"https://junglewise.ai/threats/netfoil-improper-output-neutralization-for-logs-in-doh-response-c6a8161c"},{"cvss":2.3,"slug":"tinfoil-factory-netfoil-log-injection-via-unvalidated-domain-names-020d7d32","title":"Tinfoil Factory netfoil log injection via unvalidated domain names","severity":"low","exploited":false,"published_at":"2026-07-07T20:04:22+00:00","url":"https://junglewise.ai/threats/tinfoil-factory-netfoil-log-injection-via-unvalidated-domain-names-020d7d32"},{"cvss":1.2,"slug":"tinfoil-factory-netfoil-resource-leak-in-lru-cache-b447cb08","title":"tinfoil-factory netfoil resource leak in LRU cache","severity":"low","exploited":false,"published_at":"2026-07-07T20:04:01+00:00","url":"https://junglewise.ai/threats/tinfoil-factory-netfoil-resource-leak-in-lru-cache-b447cb08"}],"generated_at":"2026-09-26T09:11:00.170868+00:00","technologies":[{"name":"Tinfoil Factory Netfoil","slug":"netfoil","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/netfoil"}]}