CVE-2025-47775
Bullfrog's DNS over TCP bypasses domain filtering
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Bullfrog's DNS over TCP bypasses domain filtering
Bullfrog is a GithHb Action to block unauthorized outbound traffic in GitHub workflows. Prior to version 0.8.4, using tcp breaks blocking and allows DNS exfiltration. This can result in sandbox bypass. Version 0.8.4 fixes the issue.
Reserved 2025-05-09 | Published 2025-05-14 | Updated 2025-05-14 | Assigner GitHub_MCWE-201: Insertion of Sensitive Information Into Sent Data
github.com/...llfrog/security/advisories/GHSA-m32f-fjw2-37v3
github.com/...ommit/ae7744ae4b3a6f8ffc2e49f501e30bf1a43d4671
github.com/bullfrogsec/bullfrog/releases/tag/v0.8.4
Support options
