// Archives

Year: 2026

Browse all posts by date.

Cybersecurity

Delayed 9+Length Byte Check: CVE‑2026‑88975 – Why http4s Ember HTTP/2 Frame Validation Is Futile

CVE-2026-88975(CVSS 3.1 7.5,CWE-400)是 http4s Ember HTTP/2 实现的未认证资源消耗漏洞:读循环在缓冲完整 9 + length 字节之前不做任何帧大小校验,对端可以在 9 字节帧头里声明一个接近 24 位上限的单帧长度,并持续发送接近 16 MiB、但仍不足额的负载,使当前未完成帧的累积缓冲 acc 驻留约 16 MiB——约为 16…

Read →
AI & Agents

New Release: Tor Browser 15.0.24

Tor Browser 15.0.24 is now available from the Tor Browser download page and also from our distribution directory. This version includes important…

Read →
AI & Agents

New Release: Tails 7.14

Changes and updates Update Tor Browser to 15.0.24. Update the Tor client to 0.4.9.13. Update the Linux kernel to 6.12.111. Fixed problems…

Read →

By month