{"id":"GO-2026-5461","revision":"92ef4d96f8a043328488576fdab005f0","records":[{"revision":"92ef4d96f8a043328488576fdab005f0","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-5461","aliases":["CVE-2026-46403","GHSA-jc6w-wmfc-fh33"],"title":"Klever-Go KVM read-only execution can commit contract delete and upgrade side effects in github.com/klever-io/klever-go","description":"Klever-Go KVM read-only execution can commit contract delete and upgrade side effects in github.com/klever-io/klever-go","state":0,"publishedAt":"2026-06-25T22:34:31+00:00","modifiedAt":"2026-06-25T23:01:14.0013975+00:00","affected":[{"ecosystem":"Go","name":"github.com/klever-io/klever-go","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.7.17"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/klever-io/klever-go/security/advisories/GHSA-jc6w-wmfc-fh33","https://github.com/klever-io/klever-go/commit/333f6ec910906e227705fc5767dc897d8fbfc862","https://github.com/klever-io/klever-go/commit/68b94a40824fac2d848a4ded6eb7c91ada6ce9ef"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-5461","license":"OSV · upstream source license applies","key":"osv:GO-2026-5461","identifiers":["GO-2026-5461","CVE-2026-46403","GHSA-jc6w-wmfc-fh33"]},"retained":false,"historicalAffected":[]}],"coverage":[]}