{"action":"Upgrade github.com/tinfoil-factory/netfoil to 0.5.0 or later.","affected":[{"fixed":"0.5.0","introduced":"0"}],"component":"github.com/tinfoil-factory/netfoil","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.5.0"],"ghsa_id":"GHSA-4ph6-mjv7-3fq6","id":"tcs_01M5KEWZBR8XM6638P29D1HJPH","modified_at":"2026-08-26T01:21:46.308295446Z","published_at":"2026-08-24T20:43:08Z","references":["https://osv.dev/vulnerability/GHSA-4ph6-mjv7-3fq6","https://github.com/tinfoil-factory/netfoil/security/advisories/GHSA-4ph6-mjv7-3fq6","https://github.com/tinfoil-factory/netfoil/commit/58cfb0cb16b824e02bf53c2d67707e5e4bd9f59b","https://github.com/tinfoil-factory/netfoil/commit/817f664c61aa64cbe0dbfcdfc05c16602b422e5b","https://github.com/tinfoil-factory/netfoil","https://github.com/tinfoil-factory/netfoil/releases/tag/v0.5.0"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-4ph6-mjv7-3fq6","url":"https://osv.dev/vulnerability/GHSA-4ph6-mjv7-3fq6"}],"summary":"netfoil vulnerable to improper handling of untrusted DoH response data"}