目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

安全情报专区 63+

精选漏洞公告、利用分析、安全博客、GHSA Advisory 等情报来源，已自动清洗 + 中英双语呈现，持续更新。

240
已接入情报源
119
当前稳定在线
290
24 小时新增
63+
AI 处理情报
持续监听、清洗、翻译并进行 AI 分析 监听情报
内容导航 全部情报 🔗 供应链投毒情报 397 恶意包结构化数据库
示例：RCE · SSRF · GHSA · 反序列化
筛选
清除筛选
High
Jackson CBOR/Smile 解析器内存耗尽 DoS 漏洞 (CVE-2024-64495)
CVE-2024-64495 · github.com · 2026-10-02
com.fasterxml.jackson.dataformat:jackson-dataformat-cbor >= 2.16.0 <= 2.18.9 · com.fasterxml.jackson.dataformat:jackson-dataformat-smile >= 2.16.0 <= 2.18.9 …
Read more
Medium
Jackson Binary 模块 CVE-2024-10455/10456/10457 DoS 漏洞修复
CVE-2024-10457 · github.com · 2026-10-02
jackson-dataformats-binary < 2.18.12
Read more
Medium
Jackson-core CVE-2026-89425 UTF8解析器DoS漏洞分析
CVE-2026-89425 · github.com · 2026-09-23
jackson-core 2.21 · jackson-core <2.21.1
Read more
High
jackson-core UTF8DataInputJsonParser 无界内存增长DoS漏洞分析
github.com · 2026-09-23
com.fasterxml.jackson.core:jackson-core >= 2.8.0, < 2.18.10 · com.fasterxml.jackson.core:jackson-core >= 2.19.0, < 2.21.6 …
Read more
High
Jackson JSON反序列化器DoS漏洞CVE-2026-91777分析
CVE-2026-91777 · github.com · 2026-09-23
jackson-databind <= 2.18
Read more
High
jackson-databind 二次正向引用DoS漏洞分析 (GHSA-cxp5-3px4-pw24)
GHSA-cxp5-3px4-pw24 · github.com · 2026-09-23
com.fasterxml.jackson.core:jackson-databind 2.5.0 · com.fasterxml.jackson.core:jackson-databind 2.19.0 …
Read more
High
jackson-databind CVE-2026-81776 多态反序列化内存耗尽漏洞分析
CVE-2026-81776 · github.com · 2026-09-23
com.fasterxml.jackson.core:jackson-databind >= 2.0.0, < 2.18.10 · com.fasterxml.jackson.core:jackson-databind >= 2.19.0, < 2.21.6 …
Read more
Medium
CVE-2026-91776 Jackson-databind TypeDeserializer缓存DoS漏洞分析
CVE-2026-91776 · github.com · 2026-09-23
jackson-databind 2.18.1 · jackson-databind 2.21.7 …
Read more
High
Jackson-core NumberInput ReDoS漏洞分析含POC
github.com · 2026-09-23
jackson-core 2.17.0 - 2.18.10 · jackson-core 2.19.0 - 2.21.6 …
Read more
Unknown
CVE-2026-68497：Jackson databind 数字长度缺失导致 DoS 修复
CVE-2026-68497 · github.com · 2026-09-12
jackson-databind 2.22.1
Read more
Medium
Jackson databind XML反序列化数值长度约束缺失漏洞
GHSA-q4xh-88c3-8wh7 · github.com · 2026-09-12
FasterXML jackson-databind 2.18.10 · FasterXML jackson-databind < 2.18.10
Read more
High
Jackson-databind CVE-3226-65497 Duration/XMLGregorianCalendar 解析型DoS漏洞及PoC
CVE-3226-65497 · github.com · 2026-09-12
jackson-databind >= 2.14.0, < 2.18.10 · jackson-databind >= 2.19.0, < 2.21.6 …
Read more
精品
Medium
Jackson-databind多态校验绕过漏洞(CVE-2025-51507)
CVE-2025-51507 · github.com · 2026-09-02
com.fasterxml.jackson.core:jackson-databind >= 2.11.0 < 2.18.10 · tools.jackson.core:jackson-databind >= 3.0.0 < 3.1.6
Read more
High
Jackson CVE-2026-83557：Comparable 反序列化漏洞分析
CVE-2026-83557 · github.com · 2026-09-02
FasterXML jackson-databind 2.x (with MapperFeature.BLOCK_UNSAFE_POLYMORPHIC_BASE_TYPES enabled) · FasterXML jackson-databind 3.x (default LaissezFaireBaseTypeValidator)
Read more
精品
Unknown
Jackson-databind 多态反序列化 RCE 漏洞分析与 2.18.9 修复细节
github.com · 2026-09-02
jackson-databind 2.18.9 and earlier
Read more
Medium
Jackson-DataBind 反序列化 Path 解析缺失 Scheme 白名单漏洞分析
github.com · 2026-09-01
com.fasterxml.jackson.core:jackson-databind >= 2.10.0, < 2.18.10 · com.fasterxml.jackson.core:jackson-databind >= 2.19.0, < 2.21.6 …
Read more
Critical
Jackson jackson-databind 反序列化 RCE 漏洞分析与修复
github.com · 2026-09-01
jackson-databind 2.x
Read more
Unknown
jackson-databind CVE-2023-35884 Path反序列化路径遍历漏洞修复分析
CVE-2023-35884 · github.com · 2026-09-01
jackson-databind (versions handling java.nio.file.Path deserialization without URI scheme restrictions)
Read more
High
Jackson-databind InetAddress反序列化SSRF漏洞 (CVE-2026-54514)
CVE-2026-54514 · github.com · 2026-08-25
com.fasterxml.jackson.core:jackson-databind < 2.18.9 · tools.jackson.core:jackson-databind < 3.1.5
Read more
精品
High
Jackson-core maxNumberLength限制绕过漏洞修复分析
github.com · 2026-08-05
jackson-core <= 2.11.4
Read more

每篇文章经过自动 HTML→Markdown 清洗 + LLM 去噪 + 中英双语翻译。原始链接保留在文章末尾。

想看哪个安全博客 / 公告源？邮件告诉我们，每周新接 1-2 个。