4 matches found
CVE-2026-58262
Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, header signature verification counts the unused padding bits of the PubKeysBitmap toward the two-thirds validator quorum. These padding bits do not correspond to any validator and are ignored by the actual BLS...
CVE-2026-58262 Klever-Go: PubKeysBitmap padding bits bypass the BLS signature quorum
Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, header signature verification counts the unused padding bits of the PubKeysBitmap toward the two-thirds validator quorum. These padding bits do not correspond to any validator and are ignored by the actual BLS...
CVE-2026-58262 Klever-Go: PubKeysBitmap padding bits bypass the BLS signature quorum
Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, header signature verification counts the unused padding bits of the PubKeysBitmap toward the two-thirds validator quorum. These padding bits do not correspond to any validator and are ignored by the actual BLS...
PT-2026-69155
Name of the Vulnerable Software and Affected Versions Klever-Go versions prior to 1.7.20 Description Header signature verification incorrectly counts unused padding bits of the PubKeysBitmap toward the two-thirds validator quorum. Because these padding bits do not correspond to any validator and...