{"action":"Upgrade github.com/klever-io/klever-go to 1.7.17 or later.","affected":[{"fixed":"1.7.17","introduced":"0"}],"component":"github.com/klever-io/klever-go","cve_ids":["CVE-2026-46403"],"ecosystem":"Go","epss":0.00445,"exploited":false,"fixed_versions":["1.7.17"],"ghsa_id":"GHSA-jc6w-wmfc-fh33","id":"tcs_01M5KFDYRAHGZPPSQ16PWZK5JM","modified_at":"2026-06-25T23:11:17.097520326Z","published_at":"2026-05-21T16:53:32Z","references":["https://osv.dev/vulnerability/GHSA-jc6w-wmfc-fh33","https://github.com/klever-io/klever-go/security/advisories/GHSA-jc6w-wmfc-fh33","https://github.com/klever-io/klever-go/commit/333f6ec910906e227705fc5767dc897d8fbfc862","https://github.com/klever-io/klever-go/commit/68b94a40824fac2d848a4ded6eb7c91ada6ce9ef","https://github.com/klever-io/klever-go"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-jc6w-wmfc-fh33","url":"https://osv.dev/vulnerability/GHSA-jc6w-wmfc-fh33"}],"summary":"Klever-Go KVM read-only execution can commit contract delete and upgrade side effects"}