| Package | Affected versions | Patched versions |
|---|---|---|
| mbed tls | < 3.5.2 | 3.5.2 |
An issue was discovered in Mbed TLS through 3.5.1. In mbedtls_ssl_session_reset, the maximum negotiable TLS version is mishandled. For example, if the last connection negotiated TLS 1.2, then 1.2 becomes the new maximum.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free