Klever-Go: Zombie-order theft: `Buy` missing `IsClaimed` guard in native marketplace

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2026-82406 · CVE overview and exploitation status

EUVD-2026-85573

GHSA-26r5-4mm2-px5c

GO-2026-6584

cve-program · CVE-2026-82406

• https://github.com/klever-io/klever-go/security/advisories/GHSA-26r5-4mm2-px5c
• https://github.com/klever-io/klever-go/pull/16
• https://github.com/klever-io/klever-go/commit/063bb3ed98f9a84a4b1f7286680613a5fc3c91b2
• https://github.com/klever-io/klever-go/releases/tag/v1.7.20

euvd · EUVD-2026-85573

• https://github.com/klever-io/klever-go/security/advisories/GHSA-26r5-4mm2-px5c
• https://github.com/klever-io/klever-go/pull/16
• https://github.com/klever-io/klever-go/commit/063bb3ed98f9a84a4b1f7286680613a5fc3c91b2
• https://github.com/klever-io/klever-go/releases/tag/v1.7.20

nvd · CVE-2026-82406

• https://github.com/klever-io/klever-go/commit/063bb3ed98f9a84a4b1f7286680613a5fc3c91b2
• https://github.com/klever-io/klever-go/pull/16
• https://github.com/klever-io/klever-go/releases/tag/v1.7.20
• https://github.com/klever-io/klever-go/security/advisories/GHSA-26r5-4mm2-px5c

osv · GHSA-26r5-4mm2-px5c

• https://github.com/klever-io/klever-go/security/advisories/GHSA-26r5-4mm2-px5c
• https://github.com/klever-io/klever-go/pull/16
• https://github.com/klever-io/klever-go/commit/063bb3ed98f9a84a4b1f7286680613a5fc3c91b2
• https://github.com/klever-io/klever-go
• https://github.com/klever-io/klever-go/releases/tag/v1.7.20

osv · GO-2026-6584

• https://github.com/klever-io/klever-go/security/advisories/GHSA-26r5-4mm2-px5c
• https://github.com/klever-io/klever-go/commit/063bb3ed98f9a84a4b1f7286680613a5fc3c91b2
• https://github.com/klever-io/klever-go/pull/16
• https://github.com/klever-io/klever-go/releases/tag/v1.7.20

No related changes are available here.