| Package | Affected versions | Patched versions |
|---|---|---|
| mbed tls | < 3.6.4 | 3.6.4 |
Mbed TLS before 3.6.4 has a PEM parsing one-byte heap-based buffer underflow, in mbedtls_pem_read_buffer and two mbedtls_pk_parse functions, via untrusted PEM input.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free