Go modules package
github.com/microsoft/go-crypto-winnative
pkg:golang/github.com/microsoft/go-crypto-winnative
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2025-25199 | Hig | 7.5 | < 0.0.0-20250211154640-f49c8e1379ea | 0.0.0-20250211154640-f49c8e1379ea | Feb 12, 2025 | go-crypto-winnative Go crypto backend for Windows using Cryptography API: Next Generation (CNG). Prior to commit f49c8e1379ea4b147d5bff1b3be5b0ff45792e41, calls to `cng.TLS1PRF` don't release the key handle, producing a small memory leak every time. Commit f49c8e1379ea4b147d5bff1 |
- affected < 0.0.0-20250211154640-f49c8e1379eafixed 0.0.0-20250211154640-f49c8e1379ea
go-crypto-winnative Go crypto backend for Windows using Cryptography API: Next Generation (CNG). Prior to commit f49c8e1379ea4b147d5bff1b3be5b0ff45792e41, calls to `cng.TLS1PRF` don't release the key handle, producing a small memory leak every time. Commit f49c8e1379ea4b147d5bff1