Go/github.com/golang-fips/openssl/v2 CVE-2024-1394: unknown, EPSS 1.53%
Memory leak in github.com/golang-fips/openssl/v2 and github.com/microsoft/go-crypto-openssl
Action: Upgrade github.com/golang-fips/openssl/v2 to 2.0.1 or later.
go get github.com/golang-fips/openssl/v2@v2.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.1 | - |
Fixed versions
| 2.0.1 |
Sources
- osv: GO-2024-2660
- https://github.com/golang-fips/openssl/commit/85d31d0d257ce842c8a1e63c4d230ae850348136
- https://github.com/microsoft/go-crypto-openssl/commit/104fe7f6912788d2ad44602f77a0a0a62f1f259f
CVE-2024-1394 · published · modified · JSON