What is GHSA-3g4q-2f67-2gvh?

GHSA-3g4q-2f67-2gvh is a security advisory published by GitHub Security Advisories with Low severity. netfoil has a resource leak in LRU cache

Why does GHSA-3g4q-2f67-2gvh have no CVE ID yet?

GitHub Security Advisories published this advisory directly to customers before NVD assigned a CVE ID. This is the embargo-window disclosure pattern — vendors notify customers on day 0; NVD's public record follows days to weeks later.

Which products are affected by GHSA-3g4q-2f67-2gvh?

GHSA-3g4q-2f67-2gvh affects 1 product, including: go/github.com/tinfoil-factory/netfoil:\u003c 0.3.0.

GHSA-3g4q-2f67-2gvhLowDisclosed before NVD

netfoil has a resource leak in LRU cache

Vendor

GitHub Security Advisories

Published

July 7, 2026

Last Modified

July 7, 2026

📋 Description

Summary

When an entry was removed from the LRU cache, a pointer to the removed element was not properly cleaned up.

Impact

A local attacker can get netfoil to use more memory. By default this is limited to 100MB via systemd, which would trigger service restarts when reached.

🎯 Affected products1

go/github.com/tinfoil-factory/netfoil:< 0.3.0

🔗 References (2)

https://github.com/tinfoil-factory/netfoil/security/advisories/GHSA-3g4q-2f67-2gvh
https://github.com/advisories/GHSA-3g4q-2f67-2gvh