In Mbed TLS 3.6.x before 3.6.7 and 4.1.x before 4.1.2, the TLS 1.3 client accepts HelloRetryRequest selecting an unadvertised group.
2.1.2-12.2.0-12.2.1-12.2.1-22.2.1-2ubuntu0.12.2.1-2ubuntu0.22.2.1-2ubuntu0.3Exploitability
AV:NAC:HPR:NUI:NScope
S:UImpact
C:NI:LA:NCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N