Skip to content
OpenAdvisories

Package · Go

github.com/klever-io/klever-go

18 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 5.9

    Klever-Go KVM: Throttler slot leak in trie account-data sync causes epoch bootstrap / state sync DoS

    Klever-Go is the Go implementation of the Klever blockchain protocol. In versions prior to 1.7.18, the account-data trie syncers are vulnerable to a resource-exhaustion flaw that leaks bounded throttler slots on error paths. In syncDataTrie() (in both userAcc…

  • Medium 6.3

    Klever-Go KVM read-only execution can commit contract delete and upgrade side effects

    Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.17, KVM exposes `ExecuteReadOnlyWithTypedArguments` as a read-only execution mechanism. The hook saves the previous read-only state, sets `runtime.SetReadOnly(true)`, executes …