{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"github.com/klever-io/klever-go","cve_ids":["CVE-2026-55763"],"ecosystem":"Go","epss":0.00507,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-v358-wf77-39xv","id":"tcs_01M5KGT7SC0THWQFETP3ZZTPJY","modified_at":"2026-09-02T19:30:09.208606541Z","published_at":"2026-09-02T18:37:27Z","references":["https://osv.dev/vulnerability/GO-2026-6323","https://github.com/klever-io/klever-go/security/advisories/GHSA-v358-wf77-39xv","https://github.com/klever-io/klever-go/commit/8bcc600b0ac88070740c63c7ce1c8a968dd85251","https://github.com/klever-io/klever-go/releases/tag/v1.7.19"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2026-6323","url":"https://osv.dev/vulnerability/GO-2026-6323"}],"summary":"klever-go: Percentage-transfer royalty skips the source debit at exactly-100% splits in github.com/klever-io/klever-go"}