Go/github.com/microsoft/go-crypto-openssl CVE-2024-1394: unknown, EPSS 1.53%
Memory leak in github.com/golang-fips/openssl/v2 and github.com/microsoft/go-crypto-openssl
Action: Upgrade github.com/microsoft/go-crypto-openssl to 0.2.9 or later.
go get github.com/microsoft/go-crypto-openssl@v0.2.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.2.9 | - |
Fixed versions
| 0.2.9 |
Sources
- osv: GO-2024-2660#Go/github.com/microsoft/go-crypto-openssl
- https://github.com/golang-fips/openssl/commit/85d31d0d257ce842c8a1e63c4d230ae850348136
- https://github.com/microsoft/go-crypto-openssl/commit/104fe7f6912788d2ad44602f77a0a0a62f1f259f
CVE-2024-1394 · published · modified · JSON