GHSA-vjgj-42f6-7997: Protection Mechanism Failure via Incomplete Seccomp Sandbox in Netfoil Vulnerability ID: GHSA-VJGJ-42F6-7997 CVSS Score: 6.0 Published: 2026-04-29 Netfoil versions prior to v0.2.1 suffer from a protection mechanism failure where the optional seccomp sandbox causes the application to crash or fails to apply due to an incomplete system call whitelist. This flaw neutralizes the intended defense-in-depth mechanisms, leaving the application with standard runtime privileges. TL;DR Netfoil's --filter-system-calls feature fails to apply correctly due to a missing SYS_RT_SIGACTION syscall in its seccomp whitelist, leading to application crashes or sandbox bypass. This issue is resolved in version 0.2.1.…