Go/github.com/microsoft/go-crypto-winnative CVE-2025-25199: high 7.5, EPSS 1.44%
go-crypto-winnative BCryptGenerateSymmetricKey memory leak
Action: Upgrade github.com/microsoft/go-crypto-winnative to 0.0.0-20250211154640-f49c8e1379ea or later.
go get github.com/microsoft/go-crypto-winnative@v0.0.0-20250211154640-f49c8e1379eaAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20250211154640-f49c8e1379ea |
Sources
- osv: GHSA-29c6-3hcj-89cf
- https://github.com/microsoft/go-crypto-winnative/security/advisories/GHSA-29c6-3hcj-89cf
- https://nvd.nist.gov/vuln/detail/CVE-2025-25199
- https://github.com/microsoft/go-crypto-winnative/commit/f49c8e1379ea4b147d5bff1b3be5b0ff45792e41
- https://github.com/microsoft/go-crypto-winnative
CVE-2025-25199 · published · modified · JSON