Klever-Go: Zombie-order theft: `Buy` missing `IsClaimed` guard in native marketplace

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-82406 · Microsoft / collected KEV context

EUVD-2026-85573

GHSA-26r5-4mm2-px5c

GO-2026-6584

cve-program · CVE-2026-82406

• https://github.com/klever-io/klever-go/security/advisories/GHSA-26r5-4mm2-px5c
• https://github.com/klever-io/klever-go/pull/16
• https://github.com/klever-io/klever-go/commit/063bb3ed98f9a84a4b1f7286680613a5fc3c91b2
• https://github.com/klever-io/klever-go/releases/tag/v1.7.20

euvd · EUVD-2026-85573

• https://github.com/klever-io/klever-go/security/advisories/GHSA-26r5-4mm2-px5c
• https://github.com/klever-io/klever-go/pull/16
• https://github.com/klever-io/klever-go/commit/063bb3ed98f9a84a4b1f7286680613a5fc3c91b2
• https://github.com/klever-io/klever-go/releases/tag/v1.7.20

nvd · CVE-2026-82406

• https://github.com/klever-io/klever-go/commit/063bb3ed98f9a84a4b1f7286680613a5fc3c91b2
• https://github.com/klever-io/klever-go/pull/16
• https://github.com/klever-io/klever-go/releases/tag/v1.7.20
• https://github.com/klever-io/klever-go/security/advisories/GHSA-26r5-4mm2-px5c

osv · GHSA-26r5-4mm2-px5c

• https://github.com/klever-io/klever-go/security/advisories/GHSA-26r5-4mm2-px5c
• https://github.com/klever-io/klever-go/pull/16
• https://github.com/klever-io/klever-go/commit/063bb3ed98f9a84a4b1f7286680613a5fc3c91b2
• https://github.com/klever-io/klever-go
• https://github.com/klever-io/klever-go/releases/tag/v1.7.20

osv · GO-2026-6584

• https://github.com/klever-io/klever-go/security/advisories/GHSA-26r5-4mm2-px5c
• https://github.com/klever-io/klever-go/commit/063bb3ed98f9a84a4b1f7286680613a5fc3c91b2
• https://github.com/klever-io/klever-go/pull/16
• https://github.com/klever-io/klever-go/releases/tag/v1.7.20

No related operational record is retained in the current change model.