GitHub Advisoryadvisory · Go
GHSA-9ppr-wfw9-xvr2 Netfoil doesn't decrement TTL
MEDIUM
Official page ↗
- Ecosystem
- Go
- Packages
- github.com/tinfoil-factory/netfoil
- Severity
- Moderate
- Weaknesses
- CWE-672
- Reviewed
- 2026-11-03
Affected packages
• Go github.com/tinfoil-factory/netfoil: >= 0.3.0, < 0.6.1 → fixed in 0.6.1
Description
Summary
TTL was not decremented, so stale records would continue to be served.
Related
Weakness · CWE (1)
- CWE-672 Operation on a Resource after Expiration or Release weakness
References
- https://github.com/tinfoil-factory/netfoil/security/advisories/GHSA-9ppr-wfw9-xvr2 web
- https://github.com/tinfoil-factory/netfoil/pull/44 web
- https://github.com/tinfoil-factory/netfoil/commit/ea42977900c864b7b1c42f26c5870c86008118a0 web
- https://github.com/tinfoil-factory/netfoil package
- https://github.com/tinfoil-factory/netfoil/releases/tag/v0.6.1 web