15 Total advisories
15 Vulnerabilities
0 Malware
Dependency scanning
Check whether github.com/tinfoil-factory/netfoil is in your codebase
Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.
Vulnerabilities
UNKNOWN
GHSA-9ppr-wfw9-xvr2
Netfoil doesn't decrement TTL
UNKNOWN
GO-2026-6277
netfoil vulnerable to improper handling of untrusted DoH response data
UNKNOWN
GHSA-4ph6-mjv7-3fq6
netfoil vulnerable to improper handling of untrusted DoH response data in github.com/tinfoil-factory/netfoil
UNKNOWN
GO-2026-6143
netfoil: Incorrect block responses could lead to localhost traffic
UNKNOWN
GHSA-xvg2-cgv6-6h7v
netfoil: Incorrect block responses could lead to localhost traffic in github.com/tinfoil-factory/netfoil
UNKNOWN
GO-2026-5934
netfoil has a domain name filter bypass via multiple questions
UNKNOWN
GO-2026-5933
netfoil has a resource leak in LRU cache
UNKNOWN
GO-2026-5935
netfoil: Attacker controlled data written to logs
UNKNOWN
GHSA-3g4q-2f67-2gvh
netfoil has a resource leak in LRU cache in github.com/tinfoil-factory/netfoil
UNKNOWN
GHSA-7856-g3gv-9wq8
netfoil: Attacker controlled data written to logs in github.com/tinfoil-factory/netfoil
UNKNOWN
GHSA-59qp-cfj3-rp64
netfoil has a domain name filter bypass via multiple questions in github.com/tinfoil-factory/netfoil
UNKNOWN
GO-2026-5664
netfoil's optional seccomp sandboxing was not applied
UNKNOWN
GHSA-vjgj-42f6-7997
netfoil's optional seccomp sandboxing was not applied in github.com/tinfoil-factory/netfoil
UNKNOWN
GO-2026-5240
Netfoil has incorrect allowlist enforcement
UNKNOWN
GHSA-84g5-x8j3-7235
Netfoil has incorrect allowlist enforcement in github.com/tinfoil-factory/netfoil
Browse more Go advisories
Learn What is SAST?
Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →
Ready to move
Start Securing
Free, no credit card | First findings in minutes