{"id":"GHSA-59qp-cfj3-rp64","title":"netfoil has a domain name filter bypass via multiple questions","summary":"netfoil has a domain name filter bypass via multiple questions","severity":"medium","cwe":["CWE-436","CWE-693"],"vendor":"tinfoil-factory","product":"github.com/tinfoil-factory/netfoil","ecosystem":"go","affected":["github.com/tinfoil-factory/netfoil < 0.3.0"],"patched":["github.com/tinfoil-factory/netfoil 0.3.0"],"published":"2026-07-07","updated":"2026-07-07","source":"GHSA","sourceUrl":"https://github.com/advisories/GHSA-59qp-cfj3-rp64","references":[{"url":"https://github.com/tinfoil-factory/netfoil/security/advisories/GHSA-59qp-cfj3-rp64"},{"url":"https://github.com/advisories/GHSA-59qp-cfj3-rp64"}],"tags":["ghsa","go"],"ingestedAt":"2026-07-07T20:43:04.993Z","slug":"GHSA-59qp-cfj3-rp64","body":"## Overview\n\n### Summary\nPotential bypass of domain name filter by crafting a DNS request with multiple questions, with the first question being legitimate.\n\n### Impact\nDepends on a local attackers ability to craft multiple questions and the remote DoH server supporting them.\n\n## Affected packages\n\n- `github.com/tinfoil-factory/netfoil < 0.3.0`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `github.com/tinfoil-factory/netfoil 0.3.0`","depth":"sunlit","depthScore":28,"depthScoreParts":{"impact":27.5,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}