{"action":"Upgrade github.com/tinfoil-factory/netfoil to 0.2.1 or later.","affected":[{"fixed":"0.2.1","introduced":"0"}],"component":"github.com/tinfoil-factory/netfoil","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.2.1"],"ghsa_id":"GHSA-84g5-x8j3-7235","id":"tcs_01M5KGJWECN0D1DS5K5D260KN2","modified_at":"2026-06-25T19:45:21.499156529Z","published_at":"2026-06-25T18:43:15Z","references":["https://osv.dev/vulnerability/GO-2026-5240","https://github.com/tinfoil-factory/netfoil/security/advisories/GHSA-84g5-x8j3-7235","https://github.com/tinfoil-factory/netfoil/commit/0ca054acf97b011e4fdd40392475c7786b975ec3","https://github.com/tinfoil-factory/netfoil/releases/tag/v0.2.1"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2026-5240","url":"https://osv.dev/vulnerability/GO-2026-5240"}],"summary":"Netfoil has incorrect allowlist enforcement in github.com/tinfoil-factory/netfoil"}