Search
Search is not available in local development.
Run npx pagefind --site __site after building to enable it.
JLSEC-2025-227

Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted ...

SourceEditHistoryOSVJSON (OSV)
JLSEC Published
Modified
Affected Packages
MbedTLS_jll < 2.28.10+0
Aliases / Upstream
CVE-2025-27809

Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbedtlssslset_hostname.

References