github.com/klever-io/klever-go vulnerabilities

CVEs whose affected-version data names the github.com/klever-io/klever-go package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

6 CVEsRSS

CVE-2026-82405High· 8.7

1mo ago

Klever-Go is the Go implementation of the Klever blockchain protocol

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, the KleverUpdateAccountPermission built-in authorizes replacement of a target account's permissions by checking attacker-controlled vmInput.RecipientA…

▾ Twilightklever-io · github.com/klever-io/klever-goEPSS 0.43%via NVD

CVE-2026-55764High

2mo ago

Klever-Go is the Go implementation of the Klever blockchain protocol

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, Klever-Go allows a mint-role holder to bypass a finite per-nonce MaxSupply on the semi-fungible token add-quantity path. In core/kapp/systemAccount/sy…

▾ Twilightklever-io · github.com/klever-io/klever-goEPSS 0.54%via NVD

CVE-2026-55763High

2mo ago

Klever-Go is the Go implementation of the Klever blockchain protocol

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, processPercentageRoyaltiesTransfer in core/kapp/accounts/accounts.go calls SubFromBalance after the split loop and after the royaltiesToPay <= 0 early…

▾ Twilightklever-io · github.com/klever-io/klever-goEPSS 0.51%via NVD

CVE-2026-54754Critical· 9.6

2mo ago

Klever-Go is the Go implementation of the Klever blockchain protocol

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, marketplace settlement in core/kapp/market/market.go reads MarketOrderData.ReferralPercentage from the listing while reading asset.Royalties.MarketPer…

▾ Midnightklever-io · github.com/klever-io/klever-goEPSS 0.43%via NVD

CVE-2026-54755Critical· 9.6

2mo ago

Klever-Go is the Go implementation of the Klever blockchain protocol

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, split-royalty fields decoded in core/kapp/builtInFunctions/utils.go can contain values greater than core.HundredPercent, and core/kapp/kda/create.go a…

▾ Midnightklever-io · github.com/klever-io/klever-goEPSS 0.56%via NVD

CVE-2026-44697High· 8.6

5mo ago

Klever-Go MultiDataInterceptor has remote OOM via crafted compressed P2P payload

▾ Twilightklever-io · github.com/klever-io/klever-goEPSS 0.40%via OSV