CVE-2025-47775

PoC —

CVSS 3.1

8.6 high

EPSS

<1%p40

Published

May 14, 2025 (May 14, 2025)

Modified

Jun 17, 2026

Description

Bullfrog is a GithHb Action to block unauthorized outbound traffic in GitHub workflows. Prior to version 0.8.4, using tcp breaks blocking and allows DNS exfiltration. This can result in sandbox bypass. Version 0.8.4 fixes the issue.

Vendors: bullfrogsec
Products: bullfrog
Weakness: CWE-201
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.