tocsin

CVE-2026-82406

2 advisories.

Go/github.com/klever-io/klever-go CVE-2026-82406: high, EPSS 0.34%

Klever-Go: Zombie-order theft: `Buy` missing `IsClaimed` guard in native marketplace

Action: Upgrade github.com/klever-io/klever-go to 1.7.20 or later.

go get github.com/klever-io/klever-go@v1.7.20

Affected

introducedfixedlast affected
01.7.20-

Fixed versions

1.7.20

Sources

CVE-2026-82406 · published · modified · JSON

Go/github.com/klever-io/klever-go CVE-2026-82406: unknown, EPSS 0.34%

Klever-Go: Zombie-order theft: `Buy` missing `IsClaimed` guard in native marketplace in github.com/klever-io/klever-go

Action: Upgrade github.com/klever-io/klever-go to 1.7.20 or later.

go get github.com/klever-io/klever-go@v1.7.20

Affected

introducedfixedlast affected
01.7.20-

Fixed versions

1.7.20

Sources

CVE-2026-82406 · published · modified · JSON