PT-2026-60907 · Go · Github.Com/Tinfoil-Factory/Netfoil

Published

2026-07-07

·

Updated

2026-07-07

CVSS v4.0

2.3

Low

VectorAV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Summary

Domain names were written to the log without first being validated to contain allowed characters.

Impact

Depends on how the logs were used.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-117

Related Identifiers

GHSA-7856-G3GV-9WQ8

Affected Products

Github.Com/Tinfoil-Factory/Netfoil