JLSEC-2025-227
- Source
- https://github.com/JuliaLang/SecurityAdvisories.jl/blob/main/advisories/published/2025/JLSEC-2025-227.md
- Import Source
- https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2025/JLSEC-2025-227.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/JLSEC-2025-227
- Upstream
- Published
- 2025-11-21T15:59:04.054Z
- Modified
- 2026-07-25T18:23:40.077032888Z
- Severity
-
- 5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N CVSS Calculator
- Summary
- Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted...
- Details
-
Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls
mbedtls_ssl_set_hostname. - Database specific
{ "sources": [ { "modified": "2026-06-17T09:04:15.590Z", "imported": "2026-07-17T20:47:14.980Z", "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2025-27809", "database_specific": { "status": "Analyzed" }, "id": "CVE-2025-27809", "published": "2025-03-25T06:15:41Z", "html_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27809" } ], "license": "CC-BY-4.0" }- References