github.com/klever-io/klever-go vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-82407Highgithub.com/klever-io/klever-go: Klever-Go: Validator registration accepts an unvalidated BLS public key → consensus liveness DoSCVE-2026-82409Highgithub.com/klever-io/klever-go: Klever-Go: Elasticsearch bulk / painless injection via on-chain account name -> explorer/indexer data forgeryCVE-2026-82406Highgithub.com/klever-io/klever-go: Klever-Go: Zombie-order theft: `Buy` missing `IsClaimed` guard in native marketplaceCVE-2026-82405Highgithub.com/klever-io/klever-go: Klever-Go Account takeover: `kleverUpdateAccountPermission` authorizes on attacker-controlled `RecipientAddr` instead of the authenticated…CVE-2026-86065Highgithub.com/klever-io/klever-go: Klever-Go: Unauthenticated WebSocket /subscribe: no read-size limit, no connection cap, permissive origin -> remote node memory/goroutine…CVE-2026-86064Highgithub.com/klever-io/klever-go: Klever-Go: /log controls global node loggingCVE-2026-55764Highgithub.com/klever-io/klever-go: klever-go: SFT add-quantity `int64` overflow bypasses a finite per-nonce MaxSupplyCVE-2026-55763Highgithub.com/klever-io/klever-go: klever-go: Percentage-transfer royalty skips the source debit at exactly-100% splitsCVE-2026-54755Criticalgithub.com/klever-io/klever-go: Klever: Integer overflow in split-royalty validation enables unbounded minting of KLV (native token)CVE-2026-54754Criticalgithub.com/klever-io/klever-go: Klever: Marketplace settlement mints KLV when referral % + royalty % exceed the bid (negative seller share silently skipped)CVE-2026-52878Highgithub.com/klever-io/klever-go: Klever-Go KVM: Unauthenticated remote node crash (nil-pointer DoS) in klever-go P2P transaction interceptor (txVersionChecker nil RawData)…CVE-2026-52880Highgithub.com/klever-io/klever-go: klever-go: REST API slow-header connection exhaustion via Gin Engine.RunCVE-2026-52879Highgithub.com/klever-io/klever-go: klever-go: Unbounded goroutine spawn on direct-message ingress enables peer-driven DoSCVE-2026-49343Mediumgithub.com/klever-io/klever-go: Klever-Go KVM: Throttler slot leak in trie account-data sync causes epoch bootstrap / state sync DoSCVE-2026-47249Highgithub.com/klever-io/klever-go: Klever-Go KVM: Hash-array amplification in P2P resolver request handlingGHSA-74M6-4HJP-7226Highgithub.com/klever-io/klever-go: Klever-Go P2P MultiDataInterceptor leaks global throttler slots on malformed compressed batches (DoS)CVE-2026-46403Mediumgithub.com/klever-io/klever-go: Klever-Go KVM read-only execution can commit contract delete and upgrade side effectsCVE-2026-44697Highgithub.com/klever-io/klever-go: Klever-Go MultiDataInterceptor has remote OOM via crafted compressed P2P payload

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo