What is GHSA-7856-g3gv-9wq8?

GHSA-7856-g3gv-9wq8 is a security advisory published by GitHub Security Advisories with Low severity. netfoil: Attacker controlled data written to logs

Why does GHSA-7856-g3gv-9wq8 have no CVE ID yet?

GitHub Security Advisories published this advisory directly to customers before NVD assigned a CVE ID. This is the embargo-window disclosure pattern — vendors notify customers on day 0; NVD's public record follows days to weeks later.

Which products are affected by GHSA-7856-g3gv-9wq8?

GHSA-7856-g3gv-9wq8 affects 1 product, including: go/github.com/tinfoil-factory/netfoil:\u003c 0.3.0.

GHSA-7856-g3gv-9wq8LowDisclosed before NVD

netfoil: Attacker controlled data written to logs

Vendor

GitHub Security Advisories

Published

July 7, 2026

Last Modified

July 7, 2026

📋 Description

Summary

Domain names were written to the log without first being validated to contain allowed characters.

Impact

Depends on how the logs were used.

🎯 Affected products1

go/github.com/tinfoil-factory/netfoil:< 0.3.0

🔗 References (2)

https://github.com/tinfoil-factory/netfoil/security/advisories/GHSA-7856-g3gv-9wq8
https://github.com/advisories/GHSA-7856-g3gv-9wq8