Netfoil has incorrect allowlist enforcement

GHSA-84g5-x8j3-7235 · GO-2026-5240

Published Apr 29, 2026 · Modified Jun 25, 2026

AI SAST

Find this class of vulnerability in your own code

Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.

Explore AI SAST Explore dependency scanning →

Description

Summary

Rules could be bypassed by changing the first character: example.com could be be bypassed by e.g. fxample.com.

Details

Off-by-one error in the suffixtrie implementation.

Impact

The domain filter could be bypassed. Please note that DNS filtering alone is not enough to block malicious traffic.

References

WEB https://github.com/tinfoil-factory/netfoil/security/advisories/GHSA-84g5-x8j3-7235
WEB https://github.com/tinfoil-factory/netfoil/commit/0ca054acf97b011e4fdd40392475c7786b975ec3
PACKAGE https://github.com/tinfoil-factory/netfoil
WEB https://github.com/tinfoil-factory/netfoil/releases/tag/v0.2.1

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes