TGViewer
AywGram AywGram @aywgram · 65 subscribers
Post #73 124
HAT's Public Channel | 🫪 libheif 被曝 CVSS 9.8 分极高危漏洞 (CVE-2026-84383), 解析精心构建的畸形 HEIC/HEIF/AVIF 图片时会触发远程 RCE 目前已披露并确定 Next.js / Sharp / ImageMagick 均受此漏洞影响,其他使用 libheif 的程序也仍有可能受此影响 请立即升级到: - libheif >= 1.23.2 - sharp >= 0.35.4 - next.js >= 15.5.24 OR >= 16.3.3 src: GHSA #安全预警@hatschannel
喜报()
正在出 Ayw v7.2.8-2,会包含 libheif 对应十几个 CVE 的修复
指望上游修这也太慢了…
More from @aywgram
  1. Oct 16, 2026AywGram-v7.3.1-1-linux-x86_64.tar.gz #aywgram #linux #ci
  2. Oct 16, 2026#aywgram #win 久等了
  3. Sep 13, 2026#preview double tap to edit 还加了 mac 的重按行为编辑,这个原版锁死表情回应不能改(
  4. Sep 11, 2026AywGram-v7.2.8-2-linux-x86_64.tar.gz #aywgram #linux #ci
  5. Sep 11, 2026AywGram-v7.2.8-2-windows-arm64.zip #aywgram #woa #ci
  6. Sep 11, 2026可以使用此测试负载查看当前客户端是否受影响
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →