目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

安全情报专区 50+

精选漏洞公告、利用分析、安全博客、GHSA Advisory 等情报来源，已自动清洗 + 中英双语呈现，持续更新。

250
已接入情报源
129
当前稳定在线
294
24 小时新增
50+
AI 处理情报
持续监听、清洗、翻译并进行 AI 分析 监听情报
内容导航 全部情报 🔗 供应链投毒情报 430 恶意包结构化数据库
示例：RCE · SSRF · GHSA · 反序列化
筛选
清除筛选
High
http4s Ember HTTP/1.1 请求走私漏洞（CVE-2024-XXXX）
github.com · 2026-09-16
org.http4s:http4s-ember-core 2.12 < 0.23.34 · org.http4s:http4s-ember-core 2.13 >= 1.0.0-M1, <= 1.0.0-M4 …
Read more
Unknown
http4s/ember HTTP/2 Transfer-Encoding 解析缺陷修复及POC
github.com · 2026-09-16
http4s < 0.23.39
Read more
Medium
http4s FollowRedirect 协议降级时敏感头泄露漏洞修复
github.com · 2026-09-16
http4s v0.23.35 and earlier
Read more
Medium
http4s FollowRedirect 中间件敏感头泄露漏洞 CVE-2022-40112
GHSA-2rgg-1783-mnx4 · github.com · 2026-09-16
org.http4s:http4s-client_2.12 (Maven) >= 0.23.34 · org.http4s:http4s-client_2.13 (Maven) >= 1.0.0-M1, <= 1.0.0-M4 …
Read more
High
CVE-2025-80213: Ember HTTP/2 无界出站队列 OOM 漏洞
CVE-2025-80213 · github.com · 2026-09-16
org.http4s:ember-core <= 2.23.34 · org.http4s:ember-core >= 1.0.0-M1, <= 1.0.0-M6
Read more
High
Ember Server CL-CL 请求走私漏洞 CVE-2026-6927
CVE-2026-6927 · github.com · 2026-09-16
org.http4s:org.http4s:ember-core 2.12 <= 0.23.34 · org.http4s:org.http4s:ember-core 2.13 <= 0.23.34 …
Read more
Medium
http4s Ember H2背压缺失导致内存溢出
github.com · 2026-09-16
serdes/0.28 · http4s between v1.0.0-M48 and v0.23.5
Read more
Medium
http4s WebSocket 负长度帧校验缺陷及 POC
github.com · 2026-09-16
http4s < v0.23.35 · http4s v1.0.0-M48
Read more
High
http4s WebSocket 解码器负数长度致 DoS（CVE-2026-88210）
CVE-2026-88210 · github.com · 2026-09-16
org.http4s:http4s-core <= 0.23.34 · org.http4s:http4s-core >= 1.0.0-M1, <= 1.0.0-M4
Read more
精品
High
Ember HTTP 请求走私漏洞修复与POC
github.com · 2026-09-16
http4s ember-core v1.0.0-M4 through v0.23.30
Read more
High
http4s DigestAuth 内存泄漏漏洞分析
CVE-2026-4928 · github.com · 2026-09-16
org.https4s:http4s-ember-server_2.12 <= 0.23.34 · org.https4s:http4s-ember-server_2.13 <= 0.23.34 …
Read more
Medium
Nonce 缓存无上限导致内存耗尽 DoS 漏洞修复分析
github.com · 2026-09-16
http4s v1.0.0-M4 · http4s v0.23.35
Read more
Medium
Ember HTTP 请求走私漏洞 CVE-2025-65004
CVE-2025-65004 · github.com · 2026-09-16
org.http4s:ember-core 2.12 <= 0.23.34 · org.http4s:ember-core 2.13 >= 1.0.0-M1, <= 1.0.0-M46 …
Read more
精品
Unknown
http4s CVE修复：拒绝同时含Content-Length与Transfer-Encoding的请求
github.com · 2026-09-16
http4s ember-core
Read more
Unknown
Blaze HttpServerParser 拒绝非 chunked 的 Transfer-Encoding
github.com · 2026-09-15
blaze v1.0.0-M2 · blaze v2.13.18
Read more
High
CVE-2025-75494 Blaze HTTP请求走私漏洞分析
CVE-2025-75494 · github.com · 2026-09-15
org.http4s:blaze-http_2.13 <= 0.23.17 · org.http4s:blaze-http_3 <= 0.23.17 …
Read more
Low
http4s Blaze 解析器 tchar 校验修复分析
4eec200 · github.com · 2026-09-15
http4s/blaze (before commit 4eec200)
Read more
Unknown
Blaze HTTP解析器重复Content-Length漏洞修复分析
github.com · 2026-09-15
blaze-server (series/0.23, v1.0.0-M12, v2.23.16)
Read more
Medium
http4s Blaze HTTP服务器请求头冲突致解析失败的修复
github.com · 2026-09-15
http4s/blaze v2.23.18
Read more
Medium
http4s-blaze HTTP解析器请求头校验不一致漏洞
github.com · 2026-09-15
http4s/blaze v0.23.x series (v0.23.10 - v0.23.16)
Read more

每篇文章经过自动 HTML→Markdown 清洗 + LLM 去噪 + 中英双语翻译。原始链接保留在文章末尾。

想看哪个安全博客 / 公告源？邮件告诉我们，每周新接 1-2 个。