CVE-2025-47775
Bullfrog's DNS over TCP bypasses domain filtering
概要
Bullfrog's DNS over TCP bypasses domain filtering
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Bullfrog is a GithHb Action to block unauthorized outbound traffic in GitHub workflows. Prior to version 0.8.4, using tcp breaks blocking and allows DNS exfiltration. This can result in sandbox bypass. Version 0.8.4 fixes the issue.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com