Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.17, a remote, unauthenticated denial-of-service vulnerability in Batch.Decompress (data/batch/batch.go) allows any peer that participates in a topic served by MultiDataInterceptor to allocate multi-gigabyte heaps on the receiving node from a sub-50 KiB gossip payload. A single packet is sufficient to OOM-kill a validator with conventional memory provisioning. Fleet-wide application affects chain liveness. This vulnerability is fixed in 1.7.17.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-44697 Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.17, a remote, unauthenticated denial-of-service vulnerability in Batch.Decompress (… https://www.cve.org/CVERecord?id=CVE-2026-44697
Post summary
CVE-2026-44697 is a remote, unauthenticated denial-of-service vulnerability in Klever-Go's Batch.Decompress, announced with no PoC, exploit, or patch details yet documented.
🚨*CVE* CVE-2026-44697 Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.17, a remote, unauthenticated denial-of-service vulnerability in Batch.Decompress (… https://www.cve.org/CVERecord?id=CVE-2026-44697 ----- Traducción: CVE-2026-44697 Kle… http://infoflow.cloud`
Post summary
A new remote unauthenticated DoS vulnerability (CVE‑2026‑44697) was disclosed for Klever‑Go’s Batch.Decompress function; no PoC, exploit, or patch is reported.