Lucene search
+L

3 matches found

OSV
OSV
•added 2026/10/01 8:23 p.m.•12 views

GO-2026-6584 Klever-Go: Zombie-order theft: `Buy` missing `IsClaimed` guard in native marketplace in github.com/klever-io/klever-go

Klever-Go: Zombie-order theft: Buy missing IsClaimed guard in native marketplace in github.com/klever-io/klever-go...

7.1CVSS5.8AI score0.00341EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/01 12:00 a.m.•8 views

PT-2026-105602

Klever-Go: Zombie-order theft: Buy missing IsClaimed guard in native marketplace in github.com/klever-io/klever-go...

5.8AI score
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2026/09/23 9:24 p.m.•23 views

Klever-Go: Zombie-order theft: `Buy` missing `IsClaimed` guard in native marketplace

Location: core/kapp/market/market.go — Buy approx. L281–436\ Severity: High The native marketplace enforces an IsClaimed guard in Claim market.go:752, CancelOrder market.go:1125, and orderEscrowAmount market.go:251, but not in Buy. Marketplace escrow is virtual: the market KApp account never...

7.1CVSS5.8AI score0.00341EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder