CVE-2025-47775
Bullfrog's DNS over TCP bypasses domain filtering
Résumé
Bullfrog's DNS over TCP bypasses domain filtering
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Bullfrog is a GithHb Action to block unauthorized outbound traffic in GitHub workflows. Prior to version 0.8.4, using tcp breaks blocking and allows DNS exfiltration. This can result in sandbox bypass. Version 0.8.4 fixes the issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com