Jaehun Lee

**Name of the Vulnerable Software and Affected Versions** Mbed TLS versions 3.5.0 through 4.0.0 **Description** A security issue was identified that allows client impersonation during TLS 1.3 session resumption. **Recommendations** Update to a version later than 4.0.0.

**Name of the Vulnerable Software and Affected Versions** versions prior to 2.3 **Description** With TLS 1.2 connections, a client can utilize any digest algorithm, including weaker ones that are supported, instead of adhering to the digests specified in the CertificateRequest. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.