---
id: GHSA-59qp-cfj3-rp64
title: netfoil has a domain name filter bypass via multiple questions
summary: netfoil has a domain name filter bypass via multiple questions
severity: medium
cwe:
  - CWE-436
  - CWE-693
vendor: tinfoil-factory
product: github.com/tinfoil-factory/netfoil
ecosystem: go
affected:
  - github.com/tinfoil-factory/netfoil < 0.3.0
patched:
  - github.com/tinfoil-factory/netfoil 0.3.0
published: '2026-07-07'
updated: '2026-07-07'
source: GHSA
sourceUrl: 'https://github.com/advisories/GHSA-59qp-cfj3-rp64'
references:
  - url: >-
      https://github.com/tinfoil-factory/netfoil/security/advisories/GHSA-59qp-cfj3-rp64
  - url: 'https://github.com/advisories/GHSA-59qp-cfj3-rp64'
tags:
  - ghsa
  - go
ingestedAt: '2026-07-07T20:43:04.993Z'
---

## Overview

### Summary
Potential bypass of domain name filter by crafting a DNS request with multiple questions, with the first question being legitimate.

### Impact
Depends on a local attackers ability to craft multiple questions and the remote DoH server supporting them.

## Affected packages

- `github.com/tinfoil-factory/netfoil < 0.3.0`

## Remediation

Upgrade to a patched release:

- `github.com/tinfoil-factory/netfoil 0.3.0`