Skip to content
OpenAdvisories

Package · Go

github.com/klever-io/klever-go

18 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 9.6

    Klever-Go: Integer overflow in split-royalty validation enables unbounded minting of KLV (native token)

    Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, split-royalty fields decoded in core/kapp/builtInFunctions/utils.go can contain values greater than core.HundredPercent, and core/kapp/kda/create.go and core/kapp/kda/trigg…

  • Critical 9.6

    Klever-Go: Marketplace settlement mints KLV when referral % + royalty % exceed the bid (negative seller share silently skipped)

    Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, marketplace settlement in core/kapp/market/market.go reads MarketOrderData.ReferralPercentage from the listing while reading asset.Royalties.MarketPercentage live at purcha…