Klever-Go P2P MultiDataInterceptor leaks global throttler slots on malformed compressed batches (DoS) in github.com/klever-io/klever-go

概要

参考情報

• klever-io/klever-go security advisory · ADVISORY
• klever-io/klever-go commit 333f6ec · FIX
• klever-io/klever-go commit 68b94a4 · FIX

github.com/klever-io/klever-go のその他の脆弱性

• CVE-2026-86065高 7.5Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, the default-open GET /subscribe endpoint in network/a…
• CVE-2026-86064高 8.6Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, the default-open GET /log WebSocket route configured …
• CVE-2026-82409高 8.4Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, indexer/common.go serializedDataForUpdateAccounts pla…
• CVE-2026-82407高 7.0Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, core/kapp/validators/validators.go Register and the r…
• CVE-2026-82406高 7.1Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, the native marketplace function core/kapp/market/mark…