Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-q56y-6umw-h3et
SummaryIn MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_verify may accept invalid signatures if hash computation fails and internal errors go unchecked, enabling LMS (Leighton-Micali Signature) forgery in a fault scenario. Specifically, unchecked return values in mbedtls_lms_verify allow an attacker (who can induce a hardware hash accelerator fault) to bypass LMS signature verification by reusing stale stack data, resulting in acceptance of an invalid signature. In mbedtls_lms_verify, the return values of the internal Merkle tree functions create_merkle_leaf_value and create_merkle_internal_value are not checked. These functions return an integer that indicates whether the call succeeded or not. If a failure occurs, the output buffer (Tc_candidate_root_node) may remain uninitialized, and the result of the signature verification is unpredictable. When the software implementation of SHA-256 is used, these functions will not fail. However, with hardware-accelerated hashing, an attacker could use fault injection against the accelerator to bypass verification.
Aliases
0
alias CVE-2025-49600
Fixed_packages
0
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=aarch64&distroversion=edge&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=aarch64&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=aarch64&distroversion=edge&reponame=main
1
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=armhf&distroversion=edge&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=armhf&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=armhf&distroversion=edge&reponame=main
2
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=armv7&distroversion=edge&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=armv7&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=armv7&distroversion=edge&reponame=main
3
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=loongarch64&distroversion=edge&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=loongarch64&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=loongarch64&distroversion=edge&reponame=main
4
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=ppc64le&distroversion=edge&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=ppc64le&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=ppc64le&distroversion=edge&reponame=main
5
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=riscv64&distroversion=edge&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=riscv64&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=riscv64&distroversion=edge&reponame=main
6
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=s390x&distroversion=edge&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=s390x&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=s390x&distroversion=edge&reponame=main
7
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=x86&distroversion=edge&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=x86&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=x86&distroversion=edge&reponame=main
8
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=x86_64&distroversion=edge&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=x86_64&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=x86_64&distroversion=edge&reponame=main
9
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=riscv64&distroversion=v3.22&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=riscv64&distroversion=v3.22&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=riscv64&distroversion=v3.22&reponame=main
10
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=x86&distroversion=v3.22&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=x86&distroversion=v3.22&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=x86&distroversion=v3.22&reponame=main
11
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=x86_64&distroversion=v3.22&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=x86_64&distroversion=v3.22&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=x86_64&distroversion=v3.22&reponame=main
12
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=aarch64&distroversion=v3.23&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=aarch64&distroversion=v3.23&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=aarch64&distroversion=v3.23&reponame=main
13
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=armv7&distroversion=v3.23&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=armv7&distroversion=v3.23&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=armv7&distroversion=v3.23&reponame=main
14
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=loongarch64&distroversion=v3.23&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=loongarch64&distroversion=v3.23&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=loongarch64&distroversion=v3.23&reponame=main
15
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=ppc64le&distroversion=v3.23&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=ppc64le&distroversion=v3.23&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=ppc64le&distroversion=v3.23&reponame=main
16
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=riscv64&distroversion=v3.23&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=riscv64&distroversion=v3.23&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=riscv64&distroversion=v3.23&reponame=main
17
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=s390x&distroversion=v3.23&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=s390x&distroversion=v3.23&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=s390x&distroversion=v3.23&reponame=main
18
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=x86&distroversion=v3.23&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=x86&distroversion=v3.23&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=x86&distroversion=v3.23&reponame=main
19
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=x86_64&distroversion=v3.23&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=x86_64&distroversion=v3.23&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=x86_64&distroversion=v3.23&reponame=main
20
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=aarch64&distroversion=v3.21&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=aarch64&distroversion=v3.21&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=aarch64&distroversion=v3.21&reponame=main
21
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=armhf&distroversion=v3.21&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=armhf&distroversion=v3.21&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=armhf&distroversion=v3.21&reponame=main
22
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=armv7&distroversion=v3.21&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=armv7&distroversion=v3.21&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=armv7&distroversion=v3.21&reponame=main
23
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=loongarch64&distroversion=v3.21&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=loongarch64&distroversion=v3.21&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=loongarch64&distroversion=v3.21&reponame=main
24
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=ppc64le&distroversion=v3.21&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=ppc64le&distroversion=v3.21&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=ppc64le&distroversion=v3.21&reponame=main
25
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=riscv64&distroversion=v3.21&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=riscv64&distroversion=v3.21&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=riscv64&distroversion=v3.21&reponame=main
26
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=s390x&distroversion=v3.21&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=s390x&distroversion=v3.21&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=s390x&distroversion=v3.21&reponame=main
27
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=x86&distroversion=v3.21&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=x86&distroversion=v3.21&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=x86&distroversion=v3.21&reponame=main
28
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=x86_64&distroversion=v3.21&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=x86_64&distroversion=v3.21&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=x86_64&distroversion=v3.21&reponame=main
29
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=loongarch64&distroversion=v3.24&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=loongarch64&distroversion=v3.24&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=loongarch64&distroversion=v3.24&reponame=main
30
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=riscv64&distroversion=v3.24&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=riscv64&distroversion=v3.24&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=riscv64&distroversion=v3.24&reponame=main
31
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=s390x&distroversion=v3.24&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=s390x&distroversion=v3.24&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=s390x&distroversion=v3.24&reponame=main
32
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=x86&distroversion=v3.24&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=x86&distroversion=v3.24&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=x86&distroversion=v3.24&reponame=main
33
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=x86_64&distroversion=v3.24&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=x86_64&distroversion=v3.24&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=x86_64&distroversion=v3.24&reponame=main
34
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=aarch64&distroversion=v3.20&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=aarch64&distroversion=v3.20&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=aarch64&distroversion=v3.20&reponame=main
35
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=armhf&distroversion=v3.20&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=armhf&distroversion=v3.20&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=armhf&distroversion=v3.20&reponame=main
36
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=armv7&distroversion=v3.20&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=armv7&distroversion=v3.20&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=armv7&distroversion=v3.20&reponame=main
37
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=ppc64le&distroversion=v3.20&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=ppc64le&distroversion=v3.20&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=ppc64le&distroversion=v3.20&reponame=main
38
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=riscv64&distroversion=v3.20&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=riscv64&distroversion=v3.20&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=riscv64&distroversion=v3.20&reponame=main
39
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=s390x&distroversion=v3.20&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=s390x&distroversion=v3.20&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=s390x&distroversion=v3.20&reponame=main
40
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=x86&distroversion=v3.20&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=x86&distroversion=v3.20&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=x86&distroversion=v3.20&reponame=main
41
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=x86_64&distroversion=v3.20&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=x86_64&distroversion=v3.20&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=x86_64&distroversion=v3.20&reponame=main
42
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=aarch64&distroversion=v3.22&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=aarch64&distroversion=v3.22&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=aarch64&distroversion=v3.22&reponame=main
43
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=armhf&distroversion=v3.22&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=armhf&distroversion=v3.22&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=armhf&distroversion=v3.22&reponame=main
44
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=armv7&distroversion=v3.22&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=armv7&distroversion=v3.22&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=armv7&distroversion=v3.22&reponame=main
45
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=loongarch64&distroversion=v3.22&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=loongarch64&distroversion=v3.22&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=loongarch64&distroversion=v3.22&reponame=main
46
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=ppc64le&distroversion=v3.22&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=ppc64le&distroversion=v3.22&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=ppc64le&distroversion=v3.22&reponame=main
47
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=s390x&distroversion=v3.22&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=s390x&distroversion=v3.22&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=s390x&distroversion=v3.22&reponame=main
48
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=armhf&distroversion=v3.23&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=armhf&distroversion=v3.23&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=armhf&distroversion=v3.23&reponame=main
49
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=aarch64&distroversion=v3.24&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=aarch64&distroversion=v3.24&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=aarch64&distroversion=v3.24&reponame=main
50
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=armhf&distroversion=v3.24&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=armhf&distroversion=v3.24&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=armhf&distroversion=v3.24&reponame=main
51
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=armv7&distroversion=v3.24&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=armv7&distroversion=v3.24&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=armv7&distroversion=v3.24&reponame=main
52
url pkg:apk/alpine/mbedtls@3.6.4-r0?arch=ppc64le&distroversion=v3.24&reponame=main
purl pkg:apk/alpine/mbedtls@3.6.4-r0?arch=ppc64le&distroversion=v3.24&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls@3.6.4-r0%3Farch=ppc64le&distroversion=v3.24&reponame=main
53
url pkg:apk/alpine/mbedtls3@3.6.4-r0?arch=aarch64&distroversion=v3.24&reponame=community
purl pkg:apk/alpine/mbedtls3@3.6.4-r0?arch=aarch64&distroversion=v3.24&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls3@3.6.4-r0%3Farch=aarch64&distroversion=v3.24&reponame=community
54
url pkg:apk/alpine/mbedtls3@3.6.4-r0?arch=armhf&distroversion=v3.24&reponame=community
purl pkg:apk/alpine/mbedtls3@3.6.4-r0?arch=armhf&distroversion=v3.24&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls3@3.6.4-r0%3Farch=armhf&distroversion=v3.24&reponame=community
55
url pkg:apk/alpine/mbedtls3@3.6.4-r0?arch=armv7&distroversion=v3.24&reponame=community
purl pkg:apk/alpine/mbedtls3@3.6.4-r0?arch=armv7&distroversion=v3.24&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls3@3.6.4-r0%3Farch=armv7&distroversion=v3.24&reponame=community
56
url pkg:apk/alpine/mbedtls3@3.6.4-r0?arch=loongarch64&distroversion=v3.24&reponame=community
purl pkg:apk/alpine/mbedtls3@3.6.4-r0?arch=loongarch64&distroversion=v3.24&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls3@3.6.4-r0%3Farch=loongarch64&distroversion=v3.24&reponame=community
57
url pkg:apk/alpine/mbedtls3@3.6.4-r0?arch=ppc64le&distroversion=v3.24&reponame=community
purl pkg:apk/alpine/mbedtls3@3.6.4-r0?arch=ppc64le&distroversion=v3.24&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls3@3.6.4-r0%3Farch=ppc64le&distroversion=v3.24&reponame=community
58
url pkg:apk/alpine/mbedtls3@3.6.4-r0?arch=riscv64&distroversion=v3.24&reponame=community
purl pkg:apk/alpine/mbedtls3@3.6.4-r0?arch=riscv64&distroversion=v3.24&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls3@3.6.4-r0%3Farch=riscv64&distroversion=v3.24&reponame=community
59
url pkg:apk/alpine/mbedtls3@3.6.4-r0?arch=s390x&distroversion=v3.24&reponame=community
purl pkg:apk/alpine/mbedtls3@3.6.4-r0?arch=s390x&distroversion=v3.24&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls3@3.6.4-r0%3Farch=s390x&distroversion=v3.24&reponame=community
60
url pkg:apk/alpine/mbedtls3@3.6.4-r0?arch=x86&distroversion=v3.24&reponame=community
purl pkg:apk/alpine/mbedtls3@3.6.4-r0?arch=x86&distroversion=v3.24&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls3@3.6.4-r0%3Farch=x86&distroversion=v3.24&reponame=community
61
url pkg:apk/alpine/mbedtls3@3.6.4-r0?arch=x86_64&distroversion=v3.24&reponame=community
purl pkg:apk/alpine/mbedtls3@3.6.4-r0?arch=x86_64&distroversion=v3.24&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls3@3.6.4-r0%3Farch=x86_64&distroversion=v3.24&reponame=community
62
url pkg:apk/alpine/mbedtls3@3.6.4-r0?arch=aarch64&distroversion=edge&reponame=community
purl pkg:apk/alpine/mbedtls3@3.6.4-r0?arch=aarch64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls3@3.6.4-r0%3Farch=aarch64&distroversion=edge&reponame=community
63
url pkg:apk/alpine/mbedtls3@3.6.4-r0?arch=armhf&distroversion=edge&reponame=community
purl pkg:apk/alpine/mbedtls3@3.6.4-r0?arch=armhf&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls3@3.6.4-r0%3Farch=armhf&distroversion=edge&reponame=community
64
url pkg:apk/alpine/mbedtls3@3.6.4-r0?arch=armv7&distroversion=edge&reponame=community
purl pkg:apk/alpine/mbedtls3@3.6.4-r0?arch=armv7&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls3@3.6.4-r0%3Farch=armv7&distroversion=edge&reponame=community
65
url pkg:apk/alpine/mbedtls3@3.6.4-r0?arch=loongarch64&distroversion=edge&reponame=community
purl pkg:apk/alpine/mbedtls3@3.6.4-r0?arch=loongarch64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls3@3.6.4-r0%3Farch=loongarch64&distroversion=edge&reponame=community
66
url pkg:apk/alpine/mbedtls3@3.6.4-r0?arch=ppc64le&distroversion=edge&reponame=community
purl pkg:apk/alpine/mbedtls3@3.6.4-r0?arch=ppc64le&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls3@3.6.4-r0%3Farch=ppc64le&distroversion=edge&reponame=community
67
url pkg:apk/alpine/mbedtls3@3.6.4-r0?arch=riscv64&distroversion=edge&reponame=community
purl pkg:apk/alpine/mbedtls3@3.6.4-r0?arch=riscv64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls3@3.6.4-r0%3Farch=riscv64&distroversion=edge&reponame=community
68
url pkg:apk/alpine/mbedtls3@3.6.4-r0?arch=s390x&distroversion=edge&reponame=community
purl pkg:apk/alpine/mbedtls3@3.6.4-r0?arch=s390x&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls3@3.6.4-r0%3Farch=s390x&distroversion=edge&reponame=community
69
url pkg:apk/alpine/mbedtls3@3.6.4-r0?arch=x86&distroversion=edge&reponame=community
purl pkg:apk/alpine/mbedtls3@3.6.4-r0?arch=x86&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls3@3.6.4-r0%3Farch=x86&distroversion=edge&reponame=community
70
url pkg:apk/alpine/mbedtls3@3.6.4-r0?arch=x86_64&distroversion=edge&reponame=community
purl pkg:apk/alpine/mbedtls3@3.6.4-r0?arch=x86_64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/mbedtls3@3.6.4-r0%3Farch=x86_64&distroversion=edge&reponame=community
71
url pkg:deb/debian/mbedtls@0?distro=trixie
purl pkg:deb/debian/mbedtls@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mbedtls@0%3Fdistro=trixie
72
url pkg:deb/debian/mbedtls@2.16.9-0.1?distro=trixie
purl pkg:deb/debian/mbedtls@2.16.9-0.1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-45f9-4rpq-1yfj
1
vulnerability VCID-78yd-h2fz-mkb2
2
vulnerability VCID-8c82-yvk4-c7eq
3
vulnerability VCID-9t8r-dmjv-7ubr
4
vulnerability VCID-c5ta-sayw-23bt
5
vulnerability VCID-gqaz-x3ta-cycm
6
vulnerability VCID-jtjx-an1m-tbfr
7
vulnerability VCID-k67t-rqgh-mqd9
8
vulnerability VCID-mb55-kggd-pycw
9
vulnerability VCID-met6-n3g2-7ffw
10
vulnerability VCID-pv7u-gk42-e7h9
11
vulnerability VCID-t6wm-8gyz-yuhj
12
vulnerability VCID-tumu-jfkr-v3d2
13
vulnerability VCID-tzuu-ccjr-8ue3
14
vulnerability VCID-yyhp-6qj6-vbfw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mbedtls@2.16.9-0.1%3Fdistro=trixie
73
url pkg:deb/debian/mbedtls@2.28.3-1?distro=trixie
purl pkg:deb/debian/mbedtls@2.28.3-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-45f9-4rpq-1yfj
1
vulnerability VCID-74rw-a8vr-3fec
2
vulnerability VCID-78yd-h2fz-mkb2
3
vulnerability VCID-8c82-yvk4-c7eq
4
vulnerability VCID-8zk5-2j61-vfhk
5
vulnerability VCID-9t8r-dmjv-7ubr
6
vulnerability VCID-ca3a-4mx4-p3ar
7
vulnerability VCID-gqaz-x3ta-cycm
8
vulnerability VCID-j2m5-x4aa-tqcv
9
vulnerability VCID-jh8m-huq1-f7gw
10
vulnerability VCID-jtjx-an1m-tbfr
11
vulnerability VCID-k67t-rqgh-mqd9
12
vulnerability VCID-mb55-kggd-pycw
13
vulnerability VCID-met6-n3g2-7ffw
14
vulnerability VCID-pv7u-gk42-e7h9
15
vulnerability VCID-q8z7-t6t1-aqef
16
vulnerability VCID-rrnf-p8e2-fyg6
17
vulnerability VCID-t6wm-8gyz-yuhj
18
vulnerability VCID-ts8g-xyud-h3f4
19
vulnerability VCID-tumu-jfkr-v3d2
20
vulnerability VCID-tzuu-ccjr-8ue3
21
vulnerability VCID-ukcp-tv8q-5udx
22
vulnerability VCID-yyhp-6qj6-vbfw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mbedtls@2.28.3-1%3Fdistro=trixie
74
url pkg:deb/debian/mbedtls@3.6.4-1?distro=trixie
purl pkg:deb/debian/mbedtls@3.6.4-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mbedtls@3.6.4-1%3Fdistro=trixie
75
url pkg:deb/debian/mbedtls@3.6.5-0.1~deb13u1?distro=trixie
purl pkg:deb/debian/mbedtls@3.6.5-0.1~deb13u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ca3a-4mx4-p3ar
1
vulnerability VCID-hbsr-f774-yufv
2
vulnerability VCID-jtjx-an1m-tbfr
3
vulnerability VCID-k67t-rqgh-mqd9
4
vulnerability VCID-met6-n3g2-7ffw
5
vulnerability VCID-t6wm-8gyz-yuhj
6
vulnerability VCID-ts8g-xyud-h3f4
7
vulnerability VCID-tumu-jfkr-v3d2
8
vulnerability VCID-ukcp-tv8q-5udx
9
vulnerability VCID-yyhp-6qj6-vbfw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mbedtls@3.6.5-0.1~deb13u1%3Fdistro=trixie
76
url pkg:deb/debian/mbedtls@3.6.6-0.1?distro=trixie
purl pkg:deb/debian/mbedtls@3.6.6-0.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mbedtls@3.6.6-0.1%3Fdistro=trixie
Affected_packages
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-49600
reference_id
reference_type
scores
0
value 0.00046
scoring_system epss
scoring_elements 0.14714
published_at 2026-06-11T12:55:00Z
1
value 0.00046
scoring_system epss
scoring_elements 0.14836
published_at 2026-06-12T12:55:00Z
2
value 0.00046
scoring_system epss
scoring_elements 0.14834
published_at 2026-06-13T12:55:00Z
3
value 0.00046
scoring_system epss
scoring_elements 0.14805
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-49600
1
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1108787
reference_id 1108787
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1108787
2
reference_url https://github.com/Mbed-TLS/mbedtls-docs/blob/main/security-advisories/mbedtls-security-advisory-2025-06-3.md
reference_id mbedtls-security-advisory-2025-06-3.md
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-07-08T13:18:22Z/
url https://github.com/Mbed-TLS/mbedtls-docs/blob/main/security-advisories/mbedtls-security-advisory-2025-06-3.md
Weaknesses
0
cwe_id 325
name Missing Cryptographic Step
description The product does not implement a required step in a cryptographic algorithm, resulting in weaker encryption than advertised by the algorithm.
Exploits
Severity_range_score4.9 - 4.9
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-q56y-6umw-h3et