Vendor
The attested-tls-poc library fails to bind attestation evidence to TLS connections, enabling attackers to relay valid evidence to impersonate workloads and intercept sensitive data.