JLSEC-2025-200

See a problem?
Please try reporting it to the source first.

Source

https://github.com/JuliaLang/SecurityAdvisories.jl/blob/main/advisories/published/2025/JLSEC-2025-200.md

Import Source

https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2025/JLSEC-2025-200.json

JSON Data

https://api.osv.dev/v1/vulns/JLSEC-2025-200

Upstream

CVE-2020-10941

Published

2025-11-21T15:59:04.054Z

Modified

2025-11-21T16:17:51.723157Z

Summary

Arm Mbed TLS before 2.16.5 allows attackers to obtain sensitive information (an RSA private key) by ...

Details

Arm Mbed TLS before 2.16.5 allows attackers to obtain sensitive information (an RSA private key) by measuring cache usage during an import.

Database specific

{
    "sources": [
        {
            "html_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-10941",
            "id": "CVE-2020-10941",
            "imported": "2025-11-20T23:04:00.264Z",
            "published": "2020-03-24T20:15:14.867Z",
            "modified": "2024-11-21T04:56:25.167Z",
            "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2020-10941"
        }
    ],
    "license": "CC-BY-4.0"
}

References

Affected packages

Julia / MbedTLS_jll

Package

Name: MbedTLS_jll
Purl: pkg:julia/MbedTLS_jll?uuid=c8ffd9c3-330d-5841-b78e-0817d7145fa1

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.16.6+0