目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

安全情报专区 90+

精选漏洞公告、利用分析、安全博客、GHSA Advisory 等情报来源，已自动清洗 + 中英双语呈现，持续更新。

243
已接入情报源
120
当前稳定在线
479
24 小时新增
90+
AI 处理情报
持续监听、清洗、翻译并进行 AI 分析 监听情报
内容导航 全部情报 🔗 供应链投毒情报 417 恶意包结构化数据库
示例：RCE · SSRF · GHSA · 反序列化
筛选
清除筛选
Low
Backstage Azure/AWS S3 路径遍历漏洞 (CVE-2026-106493)
CVE-2026-106493 · github.com · 2026-10-07
@backstage/backend-defaults < 0.17.8 · @backstage/plugin-catalog-backend-module-aws < 0.4.27 …
Read more
Medium
Backstage TechDocs 目录遍历/越权读取漏洞(GHSA-r9gr-hr7g-5gc2)
GHSA-r9gr-hr7g-5gc2 · github.com · 2026-10-07
@backstage/plugin-techdocs-backend < 2.2.4
Read more
Medium
Backstage TechDocs后端目录遍历漏洞（越权访问）及修复代码
github.com · 2026-10-07
@backstage/plugin-techdocs-backend v1.54.0 · @backstage/plugin-techdocs-backend v1.54.1 …
Read more
Unknown
Backstage Catalog集群服务账户认证绕过漏洞修复
github.com · 2026-10-07
Backstage v1.54.6 to v1.54.9
Read more
Low
Backstage Kubernetes后端认证绕过漏洞(CVE-2023-106487)通告
GHSA-h53x-hx66-25gr · github.com · 2026-10-07
backstage < 0.21.10
Read more
Medium
Backstage GitLab插件未授权访问漏洞(CVE-2026-106463)
CVE-2026-106463 · github.com · 2026-10-07
@backstage/plugin-catalog-backend-module-gitlab < 0.8.7
Read more
Medium
Backstage Scaffolder 凭据处理不当导致意外 GitHub 认证回退 (CVE-2026-106462)
CVE-2026-106462 · github.com · 2026-10-07
@backstage/plugin-scaffolder-backend < 4.1.0 · @backstage/plugin-scaffolder-backend-module-azure < 0.2.25 …
Read more
High
Backstage OAuth 未验证邮箱绕过 (v1.49.0)
github.com · 2026-10-07
@backstage/plugin-auth-node v1.49.0
Read more
Medium
Backstage OAuth邮箱验证绕过漏洞修复
github.com · 2026-10-07
@backstage/plugin-auth-node v1.54.0 · @backstage/plugin-auth-node v1.54.1 …
Read more
High
Backstage OAuth未授权访问漏洞修复及PoC
github.com · 2026-10-07
@backstage/plugin-auth-node <= v1.56.0-next.2 · @backstage/plugin-auth-node >= v1.55.0
Read more
Medium
Backstage OAuth email验证绕过(CVE-2024-106460)
GHSA-xm5q-p7w3-x6cp · github.com · 2026-10-07
@backstage/plugin-auth-node >= 0.3.0, < 0.6.15 · @backstage/plugin-auth-node >= 0.7.0, < 0.7.5
Read more
Medium
Backstage Scaffolder 越权查看任务元数据漏洞 (CVE-2025-106461)
CVE-2025-106461 · github.com · 2026-10-07
backstage < 4.1.0 · @backstage/plugin-scaffolder-backend < 4.1.0
Read more
精品
Unknown
Backstage Bitbucket Scaffolder符号链接处理漏洞修复
github.com · 2026-10-07
@backstage/plugin-scaffolder-backend-bitbucket-cloud · @backstage/plugin-scaffolder-backend-bitbucket-server
Read more
Low
Backstage OAuth配置文件规范化缺陷修复说明
github.com · 2026-10-07
Backstage < v1.49.7
Read more
High
Bitbucket Backstage 插件路径穿越漏洞 (GHSA/CVE-2023-10648)
GHSA-g8rx-f7m5-7794 · github.com · 2026-10-07
@backstage/plugin-scaffolder-backend-module-bitbucket-cloud < 0.3.10 · @backstage/plugin-scaffolder-backend-module-bitbucket-server < 0.2.25
Read more
Medium
Backstage Scaffolder 权限绕过漏洞修复分析
github.com · 2026-10-07
@backstage/plugin-scaffolder-backend
Read more
Medium
Backstage Cloudflare Access 认证提供商受众验证不足漏洞 (CVE-2026-106457)
GHSA-q333-f498-w2x7 · github.com · 2026-10-07
@backstage/plugin-auth-backend-module-cloudflare-access-provider >= 0.1.0, < 0.5.0
Read more
High
Backstage TechDocs 配置验证绕过漏洞 (CVE-2026-104433)
GHSA-q38j-6vcm-2f5m · github.com · 2026-10-07
@backstage/plugin-techdocs-node >= 0.11.12, < 1.14.7 · @backstage/plugin-techdocs-node >= 1.15.0, < 1.15.5
Read more
精品
Unknown
Backstage v1.55.0 多个后端插件安全漏洞及修复指南
github.com · 2026-10-07
@backstage/plugin-auth-backend-module-cloudflare-access-provider · @backstage/plugin-auth-backend-module-oidc-provider …
Read more
Low
Backstage Proxy后端未授权访问漏洞 (CVE-2026-106456) 及安全公告
CVE-2026-106456 · github.com · 2026-10-07
@backstage/plugin-proxy-backend >= 0.5.0, < 0.6.18
Read more

每篇文章经过自动 HTML→Markdown 清洗 + LLM 去噪 + 中英双语翻译。原始链接保留在文章末尾。

想看哪个安全博客 / 公告源？邮件告诉我们，每周新接 1-2 个。