| Package | Affected versions | Patched versions |
|---|---|---|
| mbed tls | ≥ 2.17.0, < 2.23.0< 2.16.7 | 2.23.02.16.7 |
An issue was discovered in Arm Mbed TLS before 2.23.0. Because of a side channel in modular exponentiation, an RSA private key used in a secure enclave could be disclosed.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free