Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
Provide protobuf-maven-plugin configuration in the starter parent POM
```xml
<plugin>
<groupId>io.github.ascopes</groupId>
<artifactId>protobuf-maven-plugin</artifactId>
<version>4.0.3</version>
<configuration>
<protoc>${protobuf-java.version}</protoc>
<bina...
Spring batch auto-config allows the JobRegistry to be used as a Spring Bean
Enables `BatchJdbcAutoConfiguration` and `BatchAutoConfiguration` to use `JobRegistry` as a Spring Bean, or allows setting a custom `JobRegistry`.
## Context
When my `BatchJobLifecycleManager` starts, it attempts to res...
`OAuth2AuthorizationServerWebSecurityConfiguration` should use `HttpSecurity.oauth2AuthorizationServer`
Spring Boot's auto configuration should use [`HttpSecurity.oauth2AuthorizationServer`](https://docs.spring.io/spring-security/reference/servlet/oauth2/authorization-server/getting-started.html#oauth2AuthorizationServer-d...
p3Nt3st3r-sTAr/MajorDoMo-CVE-2026-27179
language: Python
Upgrade to Jackson 2.21.1
`jackson-core` 2.19.4, as used in Spring Boot 3.5.11, is affected by [Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition](https://github.com/advisories/GHSA-72hv-8253-57qq).
I've [asked](ht...
Allow proper replacement of @SpringBootTest and extension of SpringBootTestContextBootstrapper
The last version of `SpringBootTestContextBootstrapper` allows extension so users could create there own test bootstrappers while keeping Spring Test Context creation in line with default implementation.
Since `@Boot...
rce-blfm/helpdesk-logger-ui
language: HTML
Gh0s7Ops/SSTI-RCE-Exploit
language: Python
PropertiesMeterFilter.java filters distribution.slo, distribution.minimum-expected-value and distribution.maximum-expected-value for active metrics/LONG_TASK_TIMER
Spring Boot introduced active metrics in Spring Boot 3.
By default active metrics contains _count, _sum and _max (http_client_requests_active_seconds_count as example)
Spring has the following properties to control dis...
0xgh057r3c0n/CVE-2026-0770
Langflow Remote Code Execution (RCE) Proof-of-Concept | language: Python
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
当前条件下没有命中网安开源项目。