VulnerabilityPublished
github.com/tinfoil-factory/netfoil · Netfoil doesn't decrement TTL
Affects github.com/tinfoil-factory/netfoilSource GCVE Database
0
Severity
MediumRated by Threat Radar
- Patch
- Available – fixed in 0.6.1
Data as of 3 Nov 2026, 17:04 UTC
What to do
Upgrade github.com/tinfoil-factory/netfoil to 0.6.1.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| Gogithub.com/tinfoil-factory/netfoil | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Upgrade Netfoil to version 0.6.1 or later, where the TTL decrement issue has been fixed. Since a patch is available and the vulnerability is resolved in this version, applying the official fix is the recommended remediation.
Description
A vulnerability in Netfoil versions 0.3.0 up to but not including 0.6.1 causes the TTL (Time To Live) value not to be decremented. This results in stale records continuing to be served beyond their intended lifetime.
References
- github.com/tinfoil-factory/netfoil/security/advisories/GHSA-9ppr-wfw9-xvr2 (opens in a new tab)
- github.com/tinfoil-factory/netfoil/pull/44 (opens in a new tab)
- github.com/tinfoil-factory/netfoil/commit/ea42977900c864b7b1c42f26c5870c86008118a0 (opens in a new tab)
- github.com/tinfoil-factory/netfoil (opens in a new tab)
- github.com/tinfoil-factory/netfoil/releases/tag/v0.6.1 (opens in a new tab)
Community reviews
Loading reviews…