{"action":"Upgrade github.com/golang-fips/openssl/v2 to 2.0.1 or later.","affected":[{"fixed":"2.0.1","introduced":"0"}],"component":"github.com/golang-fips/openssl/v2","cve_ids":["CVE-2024-1394"],"ecosystem":"Go","epss":0.01533,"exploited":false,"fixed_versions":["2.0.1"],"ghsa_id":"GHSA-78hx-gp6g-7mj6","id":"tcs_01M5KF1N9VGKKK2HG7GDRC6FJ2","modified_at":"2026-07-08T06:29:41.110680680Z","published_at":"2024-03-20T18:10:36Z","references":["https://osv.dev/vulnerability/GHSA-78hx-gp6g-7mj6","https://github.com/golang-fips/openssl/security/advisories/GHSA-78hx-gp6g-7mj6","https://nvd.nist.gov/vuln/detail/CVE-2024-1394","https://github.com/microsoft/go-crypto-openssl/commit/104fe7f6912788d2ad44602f77a0a0a62f1f259f","https://github.com/golang-fips/openssl/commit/85d31d0d257ce842c8a1e63c4d230ae850348136","https://access.redhat.com/errata/RHSA-2024:1462","https://access.redhat.com/errata/RHSA-2024:4378","https://access.redhat.com/errata/RHSA-2024:4379","https://access.redhat.com/errata/RHSA-2024:4502","https://access.redhat.com/errata/RHSA-2024:4581","https://access.redhat.com/errata/RHSA-2024:4591","https://access.redhat.com/errata/RHSA-2024:4672","https://access.redhat.com/errata/RHSA-2024:4699","https://access.redhat.com/errata/RHSA-2024:4761","https://access.redhat.com/errata/RHSA-2024:4762","https://access.redhat.com/errata/RHSA-2024:4960","https://access.redhat.com/errata/RHSA-2024:5258","https://access.redhat.com/errata/RHSA-2024:5634","https://access.redhat.com/errata/RHSA-2024:7262","https://access.redhat.com/security/cve/CVE-2024-1394","https://bugzilla.redhat.com/show_bug.cgi?id=2262921","https://github.com/golang-fips/openssl","https://github.com/golang-fips/openssl/releases/tag/v2.0.1","https://github.com/microsoft/go-crypto-openssl/releases/tag/v0.2.9","https://pkg.go.dev/vuln/GO-2024-2660","https://vuln.go.dev/ID/GO-2024-2660.json","https://access.redhat.com/errata/RHSA-2024:1468","https://access.redhat.com/errata/RHSA-2024:1472","https://access.redhat.com/errata/RHSA-2024:1501","https://access.redhat.com/errata/RHSA-2024:1502","https://access.redhat.com/errata/RHSA-2024:1561","https://access.redhat.com/errata/RHSA-2024:1563","https://access.redhat.com/errata/RHSA-2024:1566","https://access.redhat.com/errata/RHSA-2024:1567","https://access.redhat.com/errata/RHSA-2024:1574","https://access.redhat.com/errata/RHSA-2024:1640","https://access.redhat.com/errata/RHSA-2024:1644","https://access.redhat.com/errata/RHSA-2024:1646","https://access.redhat.com/errata/RHSA-2024:1763","https://access.redhat.com/errata/RHSA-2024:1897","https://access.redhat.com/errata/RHSA-2024:2562","https://access.redhat.com/errata/RHSA-2024:2568","https://access.redhat.com/errata/RHSA-2024:2569","https://access.redhat.com/errata/RHSA-2024:2729","https://access.redhat.com/errata/RHSA-2024:2730","https://access.redhat.com/errata/RHSA-2024:2767","https://access.redhat.com/errata/RHSA-2024:3265","https://access.redhat.com/errata/RHSA-2024:3352","https://access.redhat.com/errata/RHSA-2024:4146","https://access.redhat.com/errata/RHSA-2024:4371"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-78hx-gp6g-7mj6#Go/github.com/golang-fips/openssl/v2","url":"https://osv.dev/vulnerability/GHSA-78hx-gp6g-7mj6"}],"summary":"Memory leaks in code encrypting and verifying RSA payloads"}