Skip to content
OpenAdvisories

Package · GitHub Actions

bullfrogsec/bullfrog

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.2
    CVE-2025-47775

    Bullfrog's DNS over TCP bypasses domain filtering

    Bullfrog is a GithHb Action to block unauthorized outbound traffic in GitHub workflows. Prior to version 0.8.4, using tcp breaks blocking and allows DNS exfiltration. This can result in sandbox bypass. Version 0.8.4 fixes the issue.

    bullfrogsec bullfrog bullfrogsec/bullfrog GitHub Actions