HIGH7.5

GO-2026-5628

Klever-Go KVM: Unauthenticated remote node crash (nil-pointer DoS) in klever-go P2P transaction interceptor (txVersionChecker nil RawData) - potential chain halt in github.com/klever-io/klever-go

Quick fix

GO-2026-5628 — github.com/klever-io/klever-go: upgrade to the fixed version with the command below.

go get github.com/klever-io/klever-go@v1.7.18

Details

Klever-Go KVM: Unauthenticated remote node crash (nil-pointer DoS) in klever-go P2P transaction interceptor (txVersionChecker nil RawData) - potential chain halt in github.com/klever-io/klever-go

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/klever-io/klever-go

Introduced in: 1.7.14Fixed in: 1.7.18

Fixgo get github.com/klever-io/klever-go@v1.7.18

References

https://github.com/klever-io/klever-go/security/advisories/GHSA-rm5c-5x2p-48wr[ADVISORY]
https://github.com/klever-io/klever-go/releases/tag/v1.7.18[WEB]