Security: pi-hole/FTL
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Remote Code Execution (RCE) via dns.hostRecord Newline InjectionGHSA-wxhv-w77q-6qwp published
Apr 3, 2026 by PromoFauxHigh -
Remote Code Execution (RCE) via dhcp.hosts Newline InjectionGHSA-vfmq-jrx3-wv3c published
Apr 3, 2026 by PromoFauxHigh -
WebUI (& API) DoS mechanism - Lack of rate limiting : Silent CPU consumption and/or Log file expansionGHSA-q6fm-xwxf-37r5 published
Jul 6, 2026 by PromoFauxHigh