Lucene search
+L

6 matches found

Cvelist
Cvelist
•added 2026/08/07 10:36 p.m.•67 views

CVE-2026-52879 Klever-Go: Unbounded goroutine spawn on direct-message ingress enables peer-driven DoS

Klever-Go is the Go implementation of the Klever blockchain protocol. In versions 1.7.14 through 1.7.17, the direct-message ingress handler spawns a new goroutine for every incoming direct message before the processor-level antiflood layer makes any admission decision, with no semaphore, throttle...

7.5CVSS0.00488EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/07 10:36 p.m.•91 views

CVE-2026-52879

Summary: CVE-2026-52879 affects Klever-Go (Go implementation of Klever) where the direct-message ingress path spawns a new goroutine for every incoming direct message before the antiflood layer decides admission. This creates unbounded goroutine growth per peer, increasing stack allocations and G...

7.5CVSS7.9AI score0.00488EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/08/07 10:36 p.m.•11 views

CVE-2026-52879 Klever-Go: Unbounded goroutine spawn on direct-message ingress enables peer-driven DoS

Klever-Go is the Go implementation of the Klever blockchain protocol. In versions 1.7.14 through 1.7.17, the direct-message ingress handler spawns a new goroutine for every incoming direct message before the processor-level antiflood layer makes any admission decision, with no semaphore, throttle...

7.5CVSS7.9AI score0.00488EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/07 10:36 p.m.•16 views

CVE-2026-52879 Klever-Go: Unbounded goroutine spawn on direct-message ingress enables peer-driven DoS

Klever-Go is the Go implementation of the Klever blockchain protocol. In versions 1.7.14 through 1.7.17, the direct-message ingress handler spawns a new goroutine for every incoming direct message before the processor-level antiflood layer makes any admission decision, with no semaphore, throttle...

7.5CVSS5.4AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/07 12:00 a.m.•4 views

CVE-2026-52879: Uncontrolled Resource Consumption

Klever-Go is the Go implementation of the Klever blockchain protocol. In versions 1.7.14 through 1.7.17, the direct-message ingress handler spawns a new goroutine for every incoming direct message before the processor-level antiflood layer makes any admission decision, with no semaphore, throttle...

7.5CVSS7.9AI score0.00488EPSS
SaveExploits0References3
OSV
OSV
•added 2026/06/25 10:34 p.m.•19 views

GO-2026-5424 klever-go: Unbounded goroutine spawn on direct-message ingress enables peer-driven DoS in github.com/klever-io/klever-go

klever-go: Unbounded goroutine spawn on direct-message ingress enables peer-driven DoS in github.com/klever-io/klever-go...

7.5CVSS8.1AI score0.00488EPSS
SaveExploits0References2
Rows per page
Query Builder