{"id":"GO-2026-6586","summary":"Klever-Go: Validator registration accepts an unvalidated BLS public key → consensus liveness DoS in github.com/klever-io/klever-go","details":"Klever-Go: Validator registration accepts an unvalidated BLS public key → consensus liveness DoS in github.com/klever-io/klever-go","aliases":["CVE-2026-82407","GHSA-9wh6-9hq7-9688"],"modified":"2026-10-01T20:45:15.883717076Z","published":"2026-10-01T20:23:38Z","database_specific":{"review_status":"UNREVIEWED","url":"https://pkg.go.dev/vuln/GO-2026-6586"},"references":[{"type":"ADVISORY","url":"https://github.com/klever-io/klever-go/security/advisories/GHSA-9wh6-9hq7-9688"},{"type":"FIX","url":"https://github.com/klever-io/klever-go/commit/11606a90ccc289f93d0175994733229b332d9cff"},{"type":"FIX","url":"https://github.com/klever-io/klever-go/commit/642da967893884d635986fed3c43bdc679cbfe8f"},{"type":"WEB","url":"https://github.com/klever-io/klever-go/releases/tag/v1.7.20"}],"affected":[{"package":{"name":"github.com/klever-io/klever-go","ecosystem":"Go","purl":"pkg:golang/github.com/klever-io/klever-go"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.7.20"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://vuln.go.dev/ID/GO-2026-6586.json"}}],"schema_version":"1.9.0"}