{"id":"GHSA-84g5-x8j3-7235","summary":"Netfoil has incorrect allowlist enforcement","details":"### Summary\nRules could be bypassed by changing the first character: `example.com` could be be bypassed by e.g. `fxample.com`.\n\n### Details\nOff-by-one error in the suffixtrie implementation.\n\n### Impact\nThe domain filter could be bypassed. Please note that DNS filtering alone is not enough to block malicious traffic.","aliases":["GO-2026-5240"],"modified":"2026-06-25T19:56:39.293501071Z","published":"2026-04-29T22:22:16Z","database_specific":{"cwe_ids":["CWE-183","CWE-193"],"severity":"MODERATE","github_reviewed":true,"github_reviewed_at":"2026-04-29T22:22:16Z","nvd_published_at":null},"references":[{"type":"WEB","url":"https://github.com/tinfoil-factory/netfoil/security/advisories/GHSA-84g5-x8j3-7235"},{"type":"WEB","url":"https://github.com/tinfoil-factory/netfoil/commit/0ca054acf97b011e4fdd40392475c7786b975ec3"},{"type":"PACKAGE","url":"https://github.com/tinfoil-factory/netfoil"},{"type":"WEB","url":"https://github.com/tinfoil-factory/netfoil/releases/tag/v0.2.1"}],"affected":[{"package":{"name":"github.com/tinfoil-factory/netfoil","ecosystem":"Go","purl":"pkg:golang/github.com/tinfoil-factory/netfoil"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.2.1"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/04/GHSA-84g5-x8j3-7235/GHSA-84g5-x8j3-7235.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"}]}