VDB
Sign up
HIGH7.5

GO-2026-6581

Klever-Go: Unauthenticated WebSocket /subscribe: no read-size limit, no connection cap, permissive origin -> remote node memory/goroutine exhaustion (DoS) in github.com/klever-io/klever-go

Quick fix

GO-2026-6581 — github.com/klever-io/klever-go: upgrade to the fixed version with the command below.

go get github.com/klever-io/klever-go@v1.7.20

Details

Klever-Go: Unauthenticated WebSocket /subscribe: no read-size limit, no connection cap, permissive origin -> remote node memory/goroutine exhaustion (DoS) in github.com/klever-io/klever-go

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/klever-io/klever-go
Introduced in: 0Fixed in: 1.7.20
Fixgo get github.com/klever-io/klever-go@v1.7.20

References