GHSA-7856-g3gv-9wq8: netfoil: Attacker controlled data written to logs

July 7, 2026

Domain names were written to the log without first being validated to contain allowed characters.

References

github.com/advisories/GHSA-7856-g3gv-9wq8
github.com/tinfoil-factory/netfoil/security/advisories/GHSA-7856-g3gv-9wq8

Code Behaviors & Features

Detect and mitigate GHSA-7856-g3gv-9wq8 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →