espressif/mbedtls
1
0
Fork 0
mirror of https://github.com/espressif/mbedtls.git synced 2026-07-29 15:47:47 +00:00
Code Issues Packages Projects Releases Wiki Activity

change: update the SBOM manifest file with keywords and excluded CVEs.

Browse Source 
The latest version of esp-idf-sbom will enable an extended keyword scan,
which can aid in early detection of potential vulnerabilities by
matching specified keywords in CVE descriptions.

Additionally, CVEs identified by the extended scan but not yet analyzed
by the NVD have been added to the CVE exclude list. These CVEs have
already been addressed in the current or earlier versions of mbedtls.

Signed-off-by: Frantisek Hrbata <[email protected]>
This commit is contained in:
Frantisek Hrbata
2025-10-16 10:00:40 +05:30
committed by Mahavir Jain
parent 0d17c62d65
commit 635267f5e3
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
sbom.yml
+8
View File
@@ -3,3 +3,11 @@ cpe: cpe:2.3:a:arm:mbed_tls:{}:*:*:*:*:*:*:*
supplier: 'Organization: Espressif Systems (Shanghai) CO LTD'
originator: 'Organization: Trusted Firmware <[email protected]>'
description: An open source, portable, easy to use, readable and flexible SSL library with additional features and patches from Espressif.
cve-keywords:
- mbed tls
- mbedtls
cve-exclude-list:
- cve: CVE-2025-52496
reason: Fixed in 3.6.4
- cve: CVE-2025-27810
reason: Fixed in 3.6.3