| Package | Affected versions | Patched versions |
|---|---|---|
| mbed tls | < 3.6.5 | 3.6.5 |
Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtls_mpi_mod_inv or mbedtls_mpi_gcd.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free