Threats affecting pkg:github/Mbed TLS

CVE-2026-73064 is a vulnerability in Mbed TLS versions 3.2.0 through 3.6.6 and 4.0.0 through 4.1.0 affecting TLS 1.3 servers. An attacker who can cause an entropy source failure may remove or inject bytes at the start of the TLS stream. The CVSS score is 2.9, indicating a medium severity issue with limited impact on confidentiality and availability but potential integrity impact. No known exploits are reported in the wild. No patch or remediation information is provided in the source data.