What is GHSA-9ppr-wfw9-xvr2?

GHSA-9ppr-wfw9-xvr2 is a security advisory published by GitHub Security Advisories with Medium severity. Netfoil doesn't decrement TTL

Why does GHSA-9ppr-wfw9-xvr2 have no CVE ID yet?

GitHub Security Advisories published this advisory directly to customers before NVD assigned a CVE ID. This is the embargo-window disclosure pattern — vendors notify customers on day 0; NVD's public record follows days to weeks later.

Which products are affected by GHSA-9ppr-wfw9-xvr2?

GHSA-9ppr-wfw9-xvr2 affects 1 product, including: go/github.com/tinfoil-factory/netfoil:\u003e= 0.3.0, \u003c 0.6.1.

GHSA-9ppr-wfw9-xvr2MediumDisclosed before NVD

Netfoil doesn't decrement TTL

Vendor

GitHub Security Advisories

Published

November 3, 2026

Last Modified

November 3, 2026

📋 Description

Summary

TTL was not decremented, so stale records would continue to be served.

🎯 Affected products1

go/github.com/tinfoil-factory/netfoil:>= 0.3.0, < 0.6.1

🔗 References (5)

https://github.com/tinfoil-factory/netfoil/security/advisories/GHSA-9ppr-wfw9-xvr2
https://github.com/tinfoil-factory/netfoil/pull/44
https://github.com/tinfoil-factory/netfoil/commit/ea42977900c864b7b1c42f26c5870c86008118a0
https://github.com/tinfoil-factory/netfoil/releases/tag/v0.6.1
https://github.com/advisories/GHSA-9ppr-wfw9-xvr2