| Package | Affected versions | Patched versions |
|---|---|---|
| mbed tls | ≥ 3.6.1, < 3.6.4 | 3.6.4 |
In Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in block cipher padding removal allows an attacker to recover the plaintext when PKCS#7 padding mode is used.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free