A vulnerability in the netfoil Go library allows attacker-controlled domain names to be written to logs without validation of allowed characters. This improper sanitization could lead to issues depending on how logs are processed or consumed. The vulnerability affects versions prior to 0.3.0. The severity is considered low based on the available information.