What is GHSA-59qp-cfj3-rp64?

GHSA-59qp-cfj3-rp64 is a security advisory published by GitHub Security Advisories with Medium severity. netfoil has a domain name filter bypass via multiple questions

Why does GHSA-59qp-cfj3-rp64 have no CVE ID yet?

GitHub Security Advisories published this advisory directly to customers before NVD assigned a CVE ID. This is the embargo-window disclosure pattern — vendors notify customers on day 0; NVD's public record follows days to weeks later.

Which products are affected by GHSA-59qp-cfj3-rp64?

GHSA-59qp-cfj3-rp64 affects 1 product, including: go/github.com/tinfoil-factory/netfoil:\u003c 0.3.0.

GHSA-59qp-cfj3-rp64MediumDisclosed before NVD

netfoil has a domain name filter bypass via multiple questions

Vendor

GitHub Security Advisories

Published

July 7, 2026

Last Modified

July 7, 2026

📋 Description

Summary

Potential bypass of domain name filter by crafting a DNS request with multiple questions, with the first question being legitimate.

Impact

Depends on a local attackers ability to craft multiple questions and the remote DoH server supporting them.

🎯 Affected products1

go/github.com/tinfoil-factory/netfoil:< 0.3.0

🔗 References (2)

https://github.com/tinfoil-factory/netfoil/security/advisories/GHSA-59qp-cfj3-rp64
https://github.com/advisories/GHSA-59qp-cfj3-rp64