{"action":"Upgrade github.com/tinfoil-factory/netfoil to 0.5.0 or later.","affected":[{"fixed":"0.5.0","introduced":"0"}],"component":"github.com/tinfoil-factory/netfoil","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.5.0"],"ghsa_id":"GHSA-4ph6-mjv7-3fq6","id":"tcs_01M5KGSTPNY00W7MJXJWR6CVCM","modified_at":"2026-08-26T01:21:41.015623751Z","published_at":"2026-08-25T19:43:10Z","references":["https://osv.dev/vulnerability/GO-2026-6277","https://github.com/tinfoil-factory/netfoil/security/advisories/GHSA-4ph6-mjv7-3fq6","https://github.com/tinfoil-factory/netfoil/commit/58cfb0cb16b824e02bf53c2d67707e5e4bd9f59b","https://github.com/tinfoil-factory/netfoil/commit/817f664c61aa64cbe0dbfcdfc05c16602b422e5b","https://github.com/tinfoil-factory/netfoil/releases/tag/v0.5.0"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2026-6277","url":"https://osv.dev/vulnerability/GO-2026-6277"}],"summary":"netfoil vulnerable to improper handling of untrusted DoH response data in github.com/tinfoil-factory/netfoil"}