CVE-2024-1394

6 advisories.

Go/github.com/golang-fips/go CVE-2024-1394: high 7.5, EPSS 1.53%

Memory leaks in code encrypting and verifying RSA payloads

Action: No fix published. Pin and monitor.

Affected

introduced	fixed	last affected
0	-	1.22.1

Fixed versions

No fixed version in the source.

Sources

CVE-2024-1394 · published 2024-03-20T18:10:36Z · modified 2026-07-08T06:29:41.110680680Z · JSON

Go/github.com/golang-fips/openssl/v2 CVE-2024-1394: high 7.5, EPSS 1.53%

Memory leaks in code encrypting and verifying RSA payloads

Action: Upgrade github.com/golang-fips/openssl/v2 to 2.0.1 or later.

go get github.com/golang-fips/openssl/v2@v2.0.1

Affected

introduced	fixed	last affected
0	2.0.1	-

Fixed versions

2.0.1

Sources

CVE-2024-1394 · published 2024-03-20T18:10:36Z · modified 2026-07-08T06:29:41.110680680Z · JSON

Go/github.com/microsoft/go-crypto-openssl CVE-2024-1394: high 7.5, EPSS 1.53%

Memory leaks in code encrypting and verifying RSA payloads

Action: No fix published. Pin and monitor.

Affected

introduced	fixed	last affected
0	-	0.2.8

Fixed versions

No fixed version in the source.

Sources

CVE-2024-1394 · published 2024-03-20T18:10:36Z · modified 2026-07-08T06:29:41.110680680Z · JSON

Go/github.com/microsoft/go-crypto-openssl/openssl CVE-2024-1394: high 7.5, EPSS 1.53%

Memory leaks in code encrypting and verifying RSA payloads

Action: Upgrade github.com/microsoft/go-crypto-openssl/openssl to 0.2.9 or later.

go get github.com/microsoft/go-crypto-openssl/openssl@v0.2.9

Affected

introduced	fixed	last affected
0	0.2.9	-

Fixed versions

0.2.9

Sources

CVE-2024-1394 · published 2024-03-20T18:10:36Z · modified 2026-07-08T06:29:41.110680680Z · JSON

Go/github.com/golang-fips/openssl/v2 CVE-2024-1394: unknown, EPSS 1.53%

Memory leak in github.com/golang-fips/openssl/v2 and github.com/microsoft/go-crypto-openssl

Action: Upgrade github.com/golang-fips/openssl/v2 to 2.0.1 or later.

go get github.com/golang-fips/openssl/v2@v2.0.1

Affected

introduced	fixed	last affected
0	2.0.1	-

Fixed versions

2.0.1

Sources

CVE-2024-1394 · published 2024-03-27T22:08:48Z · modified 2026-08-05T10:56:58.284002220Z · JSON

Go/github.com/microsoft/go-crypto-openssl CVE-2024-1394: unknown, EPSS 1.53%

Memory leak in github.com/golang-fips/openssl/v2 and github.com/microsoft/go-crypto-openssl

Action: Upgrade github.com/microsoft/go-crypto-openssl to 0.2.9 or later.

go get github.com/microsoft/go-crypto-openssl@v0.2.9

Affected

introduced	fixed	last affected
0	0.2.9	-

Fixed versions

0.2.9

Sources

CVE-2024-1394 · published 2024-03-27T22:08:48Z · modified 2026-08-05T10:56:58.284002220Z · JSON