Products: 1
Vulnerabilities: 18
Known Exploited: 0
2
Critical Level Threats
7
High Level Threats
2
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-82405
Klever-Go Account takeover: `kleverUpdateAccountPermission` authorizes on attacker-controlled `RecipientAddr` instead of the authenticated caller
Last Modified: Sep 24, 2026
Published: Sep 23, 2026
CVE-2026-82409
Klever-Go: Elasticsearch bulk / painless injection via on-chain account name -> explorer/indexer data forgery
Last Modified: Sep 23, 2026
Published: Sep 23, 2026
CVE-2026-82407
Klever-Go: Validator registration accepts an unvalidated BLS public key → consensus liveness DoS
Last Modified: Sep 23, 2026
Published: Sep 23, 2026
CVE-2026-86065
Klever-Go: Unauthenticated WebSocket /subscribe: no read-size limit, no connection cap, permissive origin -> remote node memory/goroutine exhaustion (DoS)
Last Modified: Sep 29, 2026
Published: Sep 23, 2026
CVE-2026-86064
Klever-Go: /log controls global node logging
Last Modified: Sep 23, 2026
Published: Sep 23, 2026
Items Per Page
