# github.com/klever-io/klever-go (Go) vulnerabilities Source: https://junglewise.ai/threats/technologies/github-com-klever-io-klever-go Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/github-com-klever-io-klever-go.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 19 vulnerabilities in github.com/klever-io/klever-go (Go): 0 in the last 7 days and 10 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-86065, was published on 23 September 2026. Nothing in the last four weeks, down from 6 vulnerabilities in the four before. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 10 - All time: 19 (2 critical, 0 exploited in the wild) ## About github.com/klever-io/klever-go (Go) A Go software development kit for interacting with the Klever blockchain network. ## Latest github.com/klever-io/klever-go (Go) vulnerabilities - [CVE-2026-86065: Klever-Go unauthenticated WebSocket /subscribe remote DoS](https://junglewise.ai/threats/cve-2026-86065-klever-go-unauthenticated-websocket-subscribe-remote-dos) (high, CVSS 7.5, published 23 Sep 2026) - [CVE-2026-86064: Klever-Go /log endpoint unauthenticated logging configuration manipulation](https://junglewise.ai/threats/cve-2026-86064-klever-go-log-endpoint-unauthenticated-logging-configuration) (high, CVSS 8.6, published 23 Sep 2026) - [CVE-2026-82409: Klever-Go Elasticsearch injection via account name](https://junglewise.ai/threats/cve-2026-82409-klever-go-elasticsearch-injection-via-account-name) (high, CVSS 4, published 23 Sep 2026) - [CVE-2026-82407: Klever-Go BLS public key validation bypass in validator registration](https://junglewise.ai/threats/cve-2026-82407-klever-go-bls-public-key-validation-bypass-in-validator) (high, CVSS 4, published 23 Sep 2026) - [CVE-2026-82406: Klever-Go marketplace Buy missing IsClaimed guard](https://junglewise.ai/threats/cve-2026-82406-klever-go-marketplace-buy-missing-isclaimed-guard) (high, CVSS 4, published 23 Sep 2026) - [CVE-2026-82405: Klever-Go account takeover via authorization bypass in UpdateAccountPermission](https://junglewise.ai/threats/cve-2026-82405-klever-go-account-takeover-via-authorization-bypass-in) (high, CVSS 4, published 23 Sep 2026) - [CVE-2026-55764: klever-go SFT add-quantity int64 overflow bypasses MaxSupply](https://junglewise.ai/threats/cve-2026-55764-klever-go-sft-add-quantity-int64-overflow-bypasses-maxsupply) (high, CVSS 4, published 28 Aug 2026) - [CVE-2026-55763: Klever klever-go percentage-transfer royalty zero-debit in accountsKapp](https://junglewise.ai/threats/cve-2026-55763-klever-klever-go-percentage-transfer-royalty-zero-debit-in) (high, CVSS 4, published 28 Aug 2026) - [CVE-2026-54755: Klever integer overflow in split-royalty validation enables unbounded KLV minting](https://junglewise.ai/threats/cve-2026-54755-klever-integer-overflow-in-split-royalty-validation-enables) (critical, CVSS 9.6, published 28 Aug 2026) - [CVE-2026-54754: Klever marketplace settlement mints KLV when referral and royalty percentages exceed bid](https://junglewise.ai/threats/cve-2026-54754-klever-marketplace-settlement-mints-klv-when-referral-and-royalty) (critical, CVSS 9.6, published 28 Aug 2026) - [CVE-2026-52880: GO-2026-5686 - klever-go: REST API slow-header connection exhaustion via Gin Engine.Run in github.com/klever-io/klever-go](https://junglewise.ai/threats/cve-2026-52880-klever-go-rest-api-slow-header-connection-exhaustion-via-gin) (high, CVSS 7.5, published 7 Aug 2026) - [CVE-2026-52879: klever-go: Unbounded goroutine spawn on direct-message ingress enables peer-driven DoS](https://junglewise.ai/threats/cve-2026-52879-klever-go-unbounded-goroutine-spawn-on-direct-message-ingress) (high, CVSS 7.5, published 7 Aug 2026) - [CVE-2026-52878: GO-2026-5628 - Klever-Go KVM: Unauthenticated remote node crash (nil-pointer DoS) in klever-go P2P transaction interceptor…](https://junglewise.ai/threats/cve-2026-52878-klever-go-kvm-unauthenticated-remote-node-crash-nil-pointer-dos) (high, CVSS 7.5, published 7 Aug 2026) - [CVE-2026-49343: Klever-io Klever-Go throttler slot leak in trie account-data sync](https://junglewise.ai/threats/cve-2026-49343-klever-io-klever-go-throttler-slot-leak-in-trie-account-data-sync) (medium, CVSS 5.9, published 7 Aug 2026) - [CVE-2026-47249: Klever-io Klever-Go resource exhaustion in P2P resolver](https://junglewise.ai/threats/cve-2026-47249-klever-io-klever-go-resource-exhaustion-in-p2p-resolver) (high, CVSS 7.5, published 7 Aug 2026) - [CVE-2026-46403: Klever-io Klever-Go protection mechanism failure in KVM read-only execution](https://junglewise.ai/threats/cve-2026-46403-klever-io-klever-go-protection-mechanism-failure-in-kvm-read-only) (medium, CVSS 6.3, published 21 Jul 2026) - [GO-2026-5204 - Klever-Go P2P MultiDataInterceptor leaks global throttler slots on malformed compressed batches (DoS)…](https://junglewise.ai/threats/go-2026-5204-klever-go-p2p-multidatainterceptor-leaks-global-throttler-a0b60bf5) (info, published 25 Jun 2026) - [Klever-Go resource leak in P2P MultiDataInterceptor throttler](https://junglewise.ai/threats/klever-go-resource-leak-in-p2p-multidatainterceptor-throttler-d4b2ec91) (high, CVSS 7.5, published 4 Jun 2026) - [CVE-2026-44697: Klever-io Klever-Go denial of service via decompression bomb](https://junglewise.ai/threats/cve-2026-44697-klever-io-klever-go-denial-of-service-via-decompression-bomb) (high, CVSS 8.6, published 29 May 2026) ## Most severe github.com/klever-io/klever-go (Go) vulnerabilities - [CVE-2026-54755: Klever integer overflow in split-royalty validation enables unbounded KLV minting](https://junglewise.ai/threats/cve-2026-54755-klever-integer-overflow-in-split-royalty-validation-enables) (critical, CVSS 9.6, published 28 Aug 2026) - [CVE-2026-54754: Klever marketplace settlement mints KLV when referral and royalty percentages exceed bid](https://junglewise.ai/threats/cve-2026-54754-klever-marketplace-settlement-mints-klv-when-referral-and-royalty) (critical, CVSS 9.6, published 28 Aug 2026) - [CVE-2026-44697: Klever-io Klever-Go denial of service via decompression bomb](https://junglewise.ai/threats/cve-2026-44697-klever-io-klever-go-denial-of-service-via-decompression-bomb) (high, CVSS 8.6, published 29 May 2026) - [CVE-2026-86064: Klever-Go /log endpoint unauthenticated logging configuration manipulation](https://junglewise.ai/threats/cve-2026-86064-klever-go-log-endpoint-unauthenticated-logging-configuration) (high, CVSS 8.6, published 23 Sep 2026) - [CVE-2026-52880: GO-2026-5686 - klever-go: REST API slow-header connection exhaustion via Gin Engine.Run in github.com/klever-io/klever-go](https://junglewise.ai/threats/cve-2026-52880-klever-go-rest-api-slow-header-connection-exhaustion-via-gin) (high, CVSS 7.5, published 7 Aug 2026) - [CVE-2026-52879: klever-go: Unbounded goroutine spawn on direct-message ingress enables peer-driven DoS](https://junglewise.ai/threats/cve-2026-52879-klever-go-unbounded-goroutine-spawn-on-direct-message-ingress) (high, CVSS 7.5, published 7 Aug 2026) - [CVE-2026-52878: GO-2026-5628 - Klever-Go KVM: Unauthenticated remote node crash (nil-pointer DoS) in klever-go P2P transaction interceptor…](https://junglewise.ai/threats/cve-2026-52878-klever-go-kvm-unauthenticated-remote-node-crash-nil-pointer-dos) (high, CVSS 7.5, published 7 Aug 2026) - [CVE-2026-47249: Klever-io Klever-Go resource exhaustion in P2P resolver](https://junglewise.ai/threats/cve-2026-47249-klever-io-klever-go-resource-exhaustion-in-p2p-resolver) (high, CVSS 7.5, published 7 Aug 2026) - [CVE-2026-86065: Klever-Go unauthenticated WebSocket /subscribe remote DoS](https://junglewise.ai/threats/cve-2026-86065-klever-go-unauthenticated-websocket-subscribe-remote-dos) (high, CVSS 7.5, published 23 Sep 2026) - [Klever-Go resource leak in P2P MultiDataInterceptor throttler](https://junglewise.ai/threats/klever-go-resource-leak-in-p2p-multidatainterceptor-throttler-d4b2ec91) (high, CVSS 7.5, published 4 Jun 2026) ## Vulnerabilities per week Nothing in the last four weeks, down from 6 vulnerabilities in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 4 | 2 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 6 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Go technologies - [github.com/mattermost/mattermost-server (Go)](https://junglewise.ai/threats/technologies/github-com-mattermost-mattermost-server): 297 vulnerabilities - [github.com/mattermost/mattermost-server/v6 (Go)](https://junglewise.ai/threats/technologies/github-com-mattermost-mattermost-server-v6): 222 vulnerabilities - [github.com/mattermost/mattermost/server/v8 (Go)](https://junglewise.ai/threats/technologies/github-com-mattermost-mattermost-server-v8): 207 vulnerabilities - [github.com/mattermost/mattermost-server/v5 (Go)](https://junglewise.ai/threats/technologies/github-com-mattermost-mattermost-server-v5): 199 vulnerabilities - [stdlib (Go)](https://junglewise.ai/threats/technologies/go-stdlib): 178 vulnerabilities - [github.com/siyuan-note/siyuan/kernel (Go)](https://junglewise.ai/threats/technologies/github-com-siyuan-note-siyuan-kernel): 160 vulnerabilities - [code.gitea.io/gitea (Go)](https://junglewise.ai/threats/technologies/code-gitea-io-gitea): 126 vulnerabilities - [code.vikunja.io/api (Go)](https://junglewise.ai/threats/technologies/code-vikunja-io-api): 91 vulnerabilities - [gogs.io/gogs (Go)](https://junglewise.ai/threats/technologies/gogs-io-gogs): 81 vulnerabilities - [github.com/traefik/traefik/v2 (Go)](https://junglewise.ai/threats/technologies/github-com-traefik-traefik-v2): 78 vulnerabilities - [github.com/traefik/traefik (Go)](https://junglewise.ai/threats/technologies/github-com-traefik-traefik): 75 vulnerabilities - [github.com/usememos/memos (Go)](https://junglewise.ai/threats/technologies/github-com-usememos-memos): 75 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "github.com/klever-io/klever-go (Go) vulnerabilities", https://junglewise.ai/threats/technologies/github-com-klever-io-klever-go, 13 November 2026.