V2EX

哔哩哔哩

新浪新闻

CSDN

Adafruit Blog

Ant Bailing Developer Blog

小众软件

AppleInsider

Ars Technica

Berkeley AI Research

BD Tech Talks

Berkeley RDI

Boston Dynamics Blog

商业科技媒体

ByteDance Seed Research

Claude Blog

Claude Code Releases

Cloudflare Blog

CMU Machine Learning Blog

国内科技媒体

博客园 / 开源中国

Crowd Supply

CSDN

Cult of Mac

Cursor Blog

Daring Fireball

Dario Amodei

DeepLearning.AI · The Batch

Google DeepMind Blog

DeepSeek GitHub

Descript Blog

设计社区作品榜

数字尾巴

Dwarkesh Patel

EleutherAI Blog

英文科技媒体分类 feed

英文科技评测与行业媒体 feed

中央媒体电子报

freeCodeCamp

Gary Marcus

极客公园

果核剥壳

Gitee 与 GitLab

GitHub 周刊仓库

Hacker News

HelloGitHub

Hugging Face

IEEE Spectrum

inclusionAI

Indie Hackers

Interconnects

IT之家与快科技

稀土掘金

掘金 / InfoQ

Andrej Karpathy

Moonshot AI Kimi

Latent Space

Lil'Log (Lilian Weng)

Make: Magazine

Maven Central

Meituan LongCat

Meta AI Blog

Meta Engineering

Midjourney Updates

MIT News · Robotics

OSV.dev

实时热榜 · 科技

1 个榜单15小时前更新默认榜单

OSV.dev · 实时热榜

15小时前更新

01
ROOT-APP-MAVEN-AIKIDO-2026-665392 · AIKIDO-2026-665392 in com.fasterxml.jackson.core:jackson-core - Patched by Root
AIKIDO-2026-665392 in com.fasterxml.jackson.core:jackson-core - Patched by Root Affected packages: Root:Maven/com.fasterxml.jackson.core:jackson-core、Root:Maven/io.root.com.fasterxml.jackson.core:jackson-core Attributes: Fix available
02
ROOT-APP-MAVEN-CVE-2026-68494 · CVE-2026-68494 in com.fasterxml.jackson.core:jackson-core - Patched by Root
CVE-2026-68494 in com.fasterxml.jackson.core:jackson-core - Patched by Root Affected packages: Root:Maven/com.fasterxml.jackson.core:jackson-core、Root:Maven/io.root.com.fasterxml.jackson.core:jackson-core、Root:Maven/io.root.tools.jackson.core:jackson-core、Root:Maven/tools.jackson.core:jackson-core Attributes: Fix available
03
ROOT-APP-MAVEN-CVE-2026-89407 · CVE-2026-89407 in com.fasterxml.jackson.core:jackson-core - Patched by Root
CVE-2026-89407 in com.fasterxml.jackson.core:jackson-core - Patched by Root Affected packages: Root:Maven/com.fasterxml.jackson.core:jackson-core、Root:Maven/io.root.com.fasterxml.jackson.core:jackson-core、Root:Maven/io.root.tools.jackson.core:jackson-core、Root:Maven/tools.jackson.core:jackson-core Attributes: Fix available
04
ROOT-APP-MAVEN-CVE-2026-89425 · CVE-2026-89425 in com.fasterxml.jackson.core:jackson-core - Patched by Root
CVE-2026-89425 in com.fasterxml.jackson.core:jackson-core - Patched by Root Affected packages: Root:Maven/com.fasterxml.jackson.core:jackson-core、Root:Maven/io.root.com.fasterxml.jackson.core:jackson-core、Root:Maven/io.root.tools.jackson.core:jackson-core、Root:Maven/tools.jackson.core:jackson-core Attributes: Fix available
05
ROOT-APP-MAVEN-GHSA-72hv-8253-57qq · GHSA-72hv-8253-57qq in com.fasterxml.jackson.core:jackson-core - Patched by...
GHSA-72hv-8253-57qq in com.fasterxml.jackson.core:jackson-core - Patched by... Affected packages: Root:Maven/com.fasterxml.jackson.core:jackson-core、Root:Maven/io.root.com.fasterxml.jackson.core:jackson-core Attributes: Fix available
06
ROOT-APP-MAVEN-GHSA-r7wm-3cxj-wff9 · GHSA-r7wm-3cxj-wff9 in com.fasterxml.jackson.core:jackson-core - Patched by...
GHSA-r7wm-3cxj-wff9 in com.fasterxml.jackson.core:jackson-core - Patched by... Affected packages: Root:Maven/com.fasterxml.jackson.core:jackson-core、Root:Maven/io.root.com.fasterxml.jackson.core:jackson-core、Root:Maven/io.root.tools.jackson.core:jackson-core、Root:Maven/tools.jackson.core:jackson-core Attributes: Fix available
07
GHSA-qx66-fv34-fjm8 · TanStack Router: Unauthenticated reflected XSS in TanStack Start...
TanStack Router: Unauthenticated reflected XSS in TanStack Start... Affected packages: npm/@tanstack/react-start、npm/@tanstack/solid-start、npm/@tanstack/start-server-core、npm/@tanstack/vue-start Attributes: Fix available、Severity - 9.3 (Critical)
08
GHSA-hqm2-cfx2-2vgh · Pipecat: Public exposure of Pipecat’s development runner can allow...
Pipecat: Public exposure of Pipecat’s development runner can allow... Affected packages: PyPI/pipecat-ai Attributes: Fix available、Severity - 5.6 (Medium)
09
GHSA-2cvf-wqm6-wr9g · Podman: The `podman run` command can be instructed to disable almost all...
Podman: The `podman run` command can be instructed to disable almost all... Affected packages: Go/github.com/containers/podman、Go/go.podman.io/podman/v6 Attributes: Fix available、Severity - 10.0 (Critical)
10
GHSA-jwrc-gm9j-263p · JupyterLab: Command link trust prompt in JupyterLab can trust a document other...
JupyterLab: Command link trust prompt in JupyterLab can trust a document other... Affected packages: PyPI/jupyterlab、PyPI/jupyterlite-core、PyPI/notebook Attributes: Fix available、Severity - 4.2 (Medium)
11
GHSA-wwv9-g5x4-966q · SFTPGo source-side file-pattern filter bypass during copy operations
SFTPGo source-side file-pattern filter bypass during copy operations Affected packages: Go/github.com/drakkan/sftpgo/v2 Attributes: Fix available、Severity - 4.3 (Medium)
12
GHSA-pq7j-f95f-qfcv · Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning
Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning Affected packages: npm/@anthropic-ai/claude-code Attributes: Fix available、Severity - 7.5 (High)
13
GHSA-rp3h-jf77-q9p4 · containerd: Unpack DoS via repeated opaque whiteouts
containerd: Unpack DoS via repeated opaque whiteouts Affected packages: Go/github.com/containerd/containerd、Go/github.com/containerd/containerd/v2 Attributes: Fix available、Severity - 4.6 (Medium)
14
GHSA-685w-q87j-wqw3 · Distribution: Client `manifests.Get()` does not verify returned content against...
Distribution: Client `manifests.Get()` does not verify returned content against... Affected packages: Go/github.com/distribution/distribution/v3、Go/github.com/docker/distribution Attributes: Fix available、Severity - 6.8 (Medium)
15
GHSA-x586-xvc8-g7q6 · Qwik: Crashing any Qwik Server via Resource thenable
Qwik: Crashing any Qwik Server via Resource thenable Affected packages: npm/@builder.io/qwik、npm/@qwik.dev/core Attributes: Fix available、Severity - 8.7 (High)
16
GHSA-p7v4-vr35-mj6f · containerd CRI plugin: Checkpoint restore bypasses destination security context
containerd CRI plugin: Checkpoint restore bypasses destination security context Affected packages: Go/github.com/containerd/containerd/v2 Attributes: Fix available、Severity - 7.8 (High)

共 16 条热搜查看完整榜单