CVE-2025-47775

Medium CVSS: 6.2

Bullfrog is a GithHb Action to block unauthorized outbound traffic in GitHub workflows. Prior to version 0.8.4, using tcp breaks blocking and allows DNS exfiltration. This can result in sandbox bypass. Version 0.8.4 fixes the issue.

Vendor

Bullfrogsec

Product

Bullfrog

CWE

CWE-201

Yayın Tarihi

2025-05-14 16:15:28

Güncelleme

2025-07-11 16:15:04

Source Identifier

security-advisories@github.com

KEV Date Added

Kategoriler

CWE-201 Bullfrog MEDIUM Bullfrogsec 2025

Referanslar

https://github.com/bullfrogsec/bullfrog/commit/ae7744ae4b3a6f8ffc2e49f501e30bf1a43d4671 https://github.com/bullfrogsec/bullfrog/releases/tag/v0.8.4 https://github.com/bullfrogsec/bullfrog/security/advisories/GHSA-m32f-fjw2-37v3 https://github.com/bullfrogsec/bullfrog/security/advisories/GHSA-m32f-fjw2-37v3