CVE-2026-86065
2 advisories.
Go/github.com/klever-io/klever-go CVE-2026-86065: high 7.5
Klever-Go: Unauthenticated WebSocket /subscribe: no read-size limit, no connection cap, permissive origin -> remote node memory/goroutine exhaustion (DoS)
Action: Upgrade github.com/klever-io/klever-go to 1.7.20 or later.
go get github.com/klever-io/klever-go@v1.7.20Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.7.20 | - |
Fixed versions
| 1.7.20 |
Sources
- osv: GHSA-4fwh-wrm6-97xm
- https://github.com/klever-io/klever-go/security/advisories/GHSA-4fwh-wrm6-97xm
- https://github.com/klever-io/klever-go/pull/76
- https://github.com/klever-io/klever-go/commit/b8af922e749ec1fa7451b2c6e7c9f634d8603be2
- https://github.com/klever-io/klever-go
- https://github.com/klever-io/klever-go/releases/tag/v1.7.20
CVE-2026-86065 · published · modified · JSON
Go/github.com/klever-io/klever-go CVE-2026-86065: unknown
Klever-Go: Unauthenticated WebSocket /subscribe: no read-size limit, no connection cap, permissive origin -> remote node memory/goroutine exhaustion (DoS) in github.com/klever-io/klever-go
Action: Upgrade github.com/klever-io/klever-go to 1.7.20 or later.
go get github.com/klever-io/klever-go@v1.7.20Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.7.20 | - |
Fixed versions
| 1.7.20 |
Sources
- osv: GO-2026-6581
- https://github.com/klever-io/klever-go/security/advisories/GHSA-4fwh-wrm6-97xm
- https://github.com/klever-io/klever-go/commit/b8af922e749ec1fa7451b2c6e7c9f634d8603be2
- https://github.com/klever-io/klever-go/pull/76
- https://github.com/klever-io/klever-go/releases/tag/v1.7.20
CVE-2026-86065 · published · modified · JSON