哔哩哔哩

新浪新闻

CSDN

Adafruit Blog

Ant Bailing Developer Blog

小众软件

AppleInsider

Ars Technica

Berkeley AI Research

BD Tech Talks

Berkeley RDI

Boston Dynamics Blog

ByteDance Seed Research

Claude Blog

Claude Code Releases

Cloudflare Blog

CMU Machine Learning Blog

Crowd Supply

Cult of Mac

Cursor Blog

Daring Fireball

Dario Amodei

DeepLearning.AI · The Batch

Google DeepMind Blog

DeepSeek GitHub

Descript Blog

数字尾巴

Dwarkesh Patel

EleutherAI Blog

Freebuf · 网络安全

freeCodeCamp

Gary Marcus

极客公园

果核剥壳

Hacker News

HelloGitHub

全球主机交流

Hugging Face

IEEE Spectrum

inclusionAI

Indie Hackers

Interconnects

稀土掘金

Andrej Karpathy

Kickstarter · Technology

Moonshot AI Kimi

Latent Space

Lil'Log (Lilian Weng)

Make: Magazine

Maven Central

Meituan LongCat

Meta AI Blog

Meta Engineering

Midjourney Updates

MIT News · Robotics

MIT Technology Review

Mozilla.ai Blog

New Atlas · Robotics

One Useful Thing

Open Robotics Blog

OSV.dev

实时热榜 · 科技

1 个榜单9小时前更新默认榜单

实时热榜

OSV.dev

9小时前更新

01
GHSA-rgwj-5xj2-c3m3 · MySQL2: Unbounded zlib inflate in compressed MySQL protocol handler allows decompression-bomb DoS
MySQL2: Unbounded zlib inflate in compressed MySQL protocol handler allows decompression-bomb DoS Affected packages: npm/mysql2 Attributes: Fix available
02
GHSA-67mx-6wf2-92xp · Kirby: File upload permissions are not checked during processing of chunk data
Kirby: File upload permissions are not checked during processing of chunk data Affected packages: Packagist/getkirby/cms Attributes: Fix available、Severity - 7.1 (High)
03
GHSA-9vx2-j98c-p72w · Kirby: Access to image files and limited access to JSON files outside of the site root via path traversal in the media handling
Kirby: Access to image files and limited access to JSON files outside of the site root via path traversal in the media handling Affected packages: Packagist/getkirby/cms Attributes: Fix available、Severity - 8.2 (High)
04
GHSA-vcc3-ghjq-m6fr · decode-uri-component: Denial of service via exponential decoding of malformed percent-encoded input
decode-uri-component: Denial of service via exponential decoding of malformed percent-encoded input Affected packages: npm/decode-uri-component Attributes: Fix available、Severity - 6.6 (Medium)
05
GHSA-gr94-w7qr-f4j3 · Socket.IO: Engine.IO WebTransport SID DoS
Socket.IO: Engine.IO WebTransport SID DoS Affected packages: npm/engine.io Attributes: Fix available、Severity - 7.5 (High)
06
GHSA-fm3f-ch8h-qw8q · @hono/oauth-providers: OAuth state check fails open on omitted state, enabling login CSRF and forced account linking
@hono/oauth-providers: OAuth state check fails open on omitted state, enabling login CSRF and forced account linking Affected packages: npm/@hono/oauth-providers Attributes: Fix available、Severity - 5.4 (Medium)
07
GHSA-8x3q-jpjh-qh5c · elFinder: SSRF protection bypass via DNS rebinding in the `fsock_get_contents()` fallback
elFinder: SSRF protection bypass via DNS rebinding in the `fsock_get_contents()` fallback Affected packages: Packagist/studio-42/elfinder Attributes: Fix available、Severity - 8.6 (High)
08
MINI-423q-vpg7-439w · MinimOS/paketo-buildpacks-jam
Affected packages: MinimOS/paketo-buildpacks-jam Attributes: Fix available
09
MINI-8mmx-h3h4-63cx · MinimOS/paketo-buildpacks-jam
Affected packages: MinimOS/paketo-buildpacks-jam Attributes: Fix available
10
MINI-f25p-q2jj-hcgh · MinimOS/paketo-buildpacks-clojure-tools-2.17.12
Affected packages: MinimOS/paketo-buildpacks-clojure-tools-2.17.12 Attributes: Fix available
11
MINI-qvrm-4xvh-3r95 · MinimOS/paketo-buildpacks-apache-tomcat-8.10.4
Affected packages: MinimOS/paketo-buildpacks-apache-tomcat-8.10.4 Attributes: Fix available
12
MINI-2gpr-x365-m7vg · MinimOS/openclaw
Affected packages: MinimOS/openclaw Attributes: Fix available
13
MINI-2jm4-pxh2-c3mv · MinimOS/openclaw
Affected packages: MinimOS/openclaw Attributes: Fix available
14
MINI-35gv-w3r2-rhf4 · MinimOS/openclaw
Affected packages: MinimOS/openclaw Attributes: Fix available
15
MINI-39j3-48x2-p745 · MinimOS/openclaw
Affected packages: MinimOS/openclaw Attributes: Fix available
16
MINI-4g9w-8q8v-v8px · MinimOS/openclaw
Affected packages: MinimOS/openclaw Attributes: Fix available

共 16 条热搜查看完整榜单