BTC $73,692.41 +0.43%
ETH $2,052.01 +0.15%
BNB $678.00 -0.26%
XRP $1.05 -0.03%
SOL $83.18 +0.13%
TRX $0.3167 -0.25%
DOGE $0.0672 -1.38%
ADA $0.1732 -0.74%
BCH $228.87 -0.64%
LINK $10.13 -1.72%
HYPE $72.04 +0.69%
AAVE $118.41 -3.98%
SUI $0.8195 -0.93%
XLM $0.1475 +2.36%
ZEC $999.35 -1.10%
AAPL $356.23 +2.19%
AMZN $266.92 -2.07%
GOOGL $294.83 +1.63%
MSFT $522.16 -2.36%
META $627.74 -3.08%
NVDA $161.38 -6.07%
TSLA $388.60 +1.32%
SNDK $968.70 +9.85%
INTC $61.64 +4.17%
SPCX $140.00 -3.14%
MU $804.09 +8.05%
AMD $574.03 +8.54%
BTC $73,692.41 +0.43%
ETH $2,052.01 +0.15%
BNB $678.00 -0.26%
XRP $1.05 -0.03%
SOL $83.18 +0.13%
TRX $0.3167 -0.25%
DOGE $0.0672 -1.38%
ADA $0.1732 -0.74%
BCH $228.87 -0.64%
LINK $10.13 -1.72%
HYPE $72.04 +0.69%
AAVE $118.41 -3.98%
SUI $0.8195 -0.93%
XLM $0.1475 +2.36%
ZEC $999.35 -1.10%
AAPL $356.23 +2.19%
AMZN $266.92 -2.07%
GOOGL $294.83 +1.63%
MSFT $522.16 -2.36%
META $627.74 -3.08%
NVDA $161.38 -6.07%
TSLA $388.60 +1.32%
SNDK $968.70 +9.85%
INTC $61.64 +4.17%
SPCX $140.00 -3.14%
MU $804.09 +8.05%
AMD $574.03 +8.54%

慢霧餘弦警告 Telegram 聊天嵌入功能或存惡意代碼風險

2026-11-12 08:45:26

ChainCatcher 消息,慢霧創始人余弦發文警告,Telegram 新版本支持在聊天消息中直接嵌入互動式應用,相關功能採用 QuickJS 執行 JavaScript,可能增加惡意代碼攻擊風險,建議用戶謹慎升級。

Telegram 於 11 月 9 日推出的 Bot API 10.4 正式引入該功能。儘管官方提供了 QuickJS 沙盒及網絡訪問限制,但近期安全研究人員發現,相關執行引擎曾存在可能突破沙盒隔離的遠程代碼執行漏洞。

解讀
app_icon
ChainCatcher 與創新者共建Web3世界