Issues · Mbed-TLS/mbedtls · GitHub

Labels Milestones New issue

Setting `mbedtls_x509_crt_profile.allowed_pks` requires use of private `mbedtls_pk_type_t` value

#10747

· NovaNekmit opened

on May 5, 2026

TLS 1.3: Accept Trailing Bytes Instead of Failing

component-tls13

#10745

· gilles-peskine-arm opened

on Apr 30, 2026

mbedTLS TLS 1.3 `certificate_authorities` Validation Gap

component-tls13

#10744

· LiD0209 opened

on Apr 30, 2026

Better support for build as cmake subproject

#10743

· hlewin opened

on Apr 30, 2026

`mbedtls_config.c` missing `mbedtls_platform_requirements.h`

#10740

· valeriosetti opened

on Apr 29, 2026

ClientHello `supported_versions` Accepts a Trailing Byte

component-tls13

#10739

· LiD0209 opened

on Apr 29, 2026

mbedTLS Does Not Strictly Enforce the `NewSessionTicket.ticket` Lower Bound

component-tls13

#10738

· LiD0209 opened

on Apr 29, 2026

mbedTLS Does Not Strictly Enforce the `ServerHello.key_share` Exact Length

component-tls13

#10737

· LiD0209 opened

on Apr 29, 2026

mbedTLS Does Not Map Oversized TLS 1.3 Records to `record_overflow`

component-tls13

#10736

· LiD0209 opened

on Apr 29, 2026

mbedTLS Does Not Fully Match TLS 1.3 `legacy_record_version` Handling

component-tls13

#10735

· LiD0209 opened

on Apr 29, 2026

mbedTLS Does Not Strictly Enforce `PskIdentity.identity<1..>` Inside `OfferedPsks`

component-tls13

#10734

· LiD0209 opened

on Apr 29, 2026

mbedTLS Does Not Strictly Enforce the `NamedGroupList` Lower Bound

component-tls13

#10733

· LiD0209 opened

on Apr 29, 2026