{"id":"GHSA-9ppr-wfw9-xvr2","aliases":["GO-2026-6906"],"status":"published","title":"Netfoil doesn't decrement TTL","description":"### Summary\nTTL was not decremented, so stale records would continue to be served.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-672"],"published":"2026-11-03T16:48:29Z","modified":"2026-11-05T23:26:18Z","fixes":[{"ecosystem":"Go","package":"github.com/tinfoil-factory/netfoil","fixed_in":["0.6.1"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Go","package":"github.com/tinfoil-factory/netfoil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.3.0"},{"fixed":"0.6.1"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/tinfoil-factory/netfoil","ranges":[{"type":"SEMVER","events":[{"introduced":"0.3.0"},{"fixed":"0.6.1"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/tinfoil-factory/netfoil","ranges":[{"type":"SEMVER","events":[{"introduced":"0.3.0"},{"fixed":"0.6.1"}]}]}],"references":[{"url":"https://github.com/tinfoil-factory/netfoil/security/advisories/GHSA-9ppr-wfw9-xvr2","tags":["web","advisory"]},{"url":"https://github.com/tinfoil-factory/netfoil/pull/44","tags":["web","fix"]},{"url":"https://github.com/tinfoil-factory/netfoil/commit/ea42977900c864b7b1c42f26c5870c86008118a0","tags":["web","fix"]},{"url":"https://github.com/tinfoil-factory/netfoil/releases/tag/v0.6.1","tags":["web"]},{"url":"https://github.com/advisories/GHSA-9ppr-wfw9-xvr2"},{"url":"https://github.com/tinfoil-factory/netfoil","tags":["package"]}],"sources":{"ghsa":[{"id":"GHSA-9ppr-wfw9-xvr2","title":"Netfoil doesn't decrement TTL","description":"### Summary\nTTL was not decremented, so stale records would continue to be served.","status":"published","published":"2026-11-03T16:48:29Z","modified":"2026-11-03T16:48:30Z","cwes":["CWE-672"],"updated_at":"2026-11-03T16:58:16.243206Z"}],"osv":[{"id":"GHSA-9ppr-wfw9-xvr2","title":"Netfoil doesn't decrement TTL","description":"### Summary\nTTL was not decremented, so stale records would continue to be served.","status":"published","published":"2026-11-03T16:48:29Z","modified":"2026-11-05T23:26:18.986677302Z","cwes":["CWE-672"],"updated_at":"2026-11-06T00:02:13.631839Z"},{"id":"GO-2026-6906","title":"Netfoil doesn't decrement TTL in github.com/tinfoil-factory/netfoil","description":"Netfoil doesn't decrement TTL in github.com/tinfoil-factory/netfoil","status":"published","published":"2026-11-05T22:55:09Z","modified":"2026-11-05T23:15:16.268613205Z","updated_at":"2026-11-06T00:02:13.631839Z"}]}}