GO-2026-5461 Klever-Go KVM read-only execution can commit contract delete and upgrade side effects in github.com/klever-io/klever-go

Klever-Go KVM read-only execution can commit contract delete and upgrade side effects in github.com/klever-io/klever-go...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS through the RequestDataTypeHashArrayType request handling process. An attacker can cause excessive memory and CPU resource consumption by sending a specially crafted compressed request that decompresses into a larg...

Protection Mechanism Failure

Overview Affected versions of this package are vulnerable to Protection Mechanism Failure through the ExecuteReadOnlyWithTypedArguments process. An attacker can cause unauthorized contract deletion or upgrade operations by invoking state-changing actions during read-only execution, thereby...