lowVulnerability

GHSA-3g4q-2f67-2gvh

### Summary When an entry was removed from the LRU cache, a pointer to the removed element was not properly cleaned up. ### Impact A local attacker can get netfoil to use more memory. By default this is limited to 100MB via systemd, which would trigger service restarts when reached.

Properties

ghsa_id
GHSA-3g4q-2f67-2gvh
summary
netfoil has a resource leak in LRU cache
severity
low
cve_id
GHSA-3g4q-2f67-2gvh
is_ghsa_only
true
ghsa_published
2026-07-07T20:04:01Z
source_url
https://github.com/advisories/GHSA-3g4q-2f67-2gvh
ghsa_updated
2026-07-07T20:04:02Z

Related Entities (4)

REPORTED_BY (1)

[Source]GitHub Advisory Database

VULNERABLE_TO (1)

[Software]go/github.com/tinfoil-factory/netfoil

AFFECTS (1)

[Software]go/github.com/tinfoil-factory/netfoil

HAS_WEAKNESS (1)

[Weakness]Missing Release of Memory after Effective Lifetime

Explore deeper with Ninja Signal's threat intelligence graph

GHSA-3g4q-2f67-2gvh — Ninja Signal Threat Intelligence | Ninja Signal