cve 2025 12889

  1. TLS 1.2 Digest Downgrade Bug CVE-2025-12889 Fixed in wolfSSL 5.8.4

    A newly recorded flaw in TLS 1.2 implementations lets a client deliberately choose a weaker message digest than the server requested during client-certificate authentication — a subtle but real violation of the TLS 1.2 handshake rules that has been cataloged as CVE-2025-12889 and fixed in the...