The netfoil library versions prior to 0.3.0 contain a vulnerability that permits bypassing domain name filters by sending DNS requests with multiple questions. The first question in the request is legitimate, which may allow the attacker to evade filtering mechanisms. Exploitation requires local attacker capability to craft such requests and a remote DoH server that supports multiple questions. The vulnerability is identified under CWE-436 (Interpretation Conflict) and CWE-693 (Protection Mechanism Failure).

The impact depends on the attacker's ability to craft DNS requests with multiple questions and the remote DoH server's support for such requests. Successful exploitation could allow bypassing domain name filters, potentially enabling unauthorized DNS queries that would otherwise be blocked. No remote or privilege escalation impacts are indicated, and no known exploits have been reported.

No official patch or fix is currently available for this vulnerability. Users should monitor the vendor's advisory channels for updates. Since this is a local attack requiring specific conditions, restricting local access and monitoring for unusual DNS request patterns may help reduce risk until a fix is released.