diff --git a/ports/mbedtls/portfile.cmake b/ports/mbedtls/portfile.cmake
index 1f65fff5ba..e2aff063c9 100644
--- a/ports/mbedtls/portfile.cmake
+++ b/ports/mbedtls/portfile.cmake
@@ -3,8 +3,8 @@ set(VCPKG_LIBRARY_LINKAGE static)
 vcpkg_from_github(
     OUT_SOURCE_PATH SOURCE_PATH
     REPO ARMmbed/mbedtls
-    REF 8b3f26a5ac38d4fdccbc5c5366229f3e01dafcc0 # mbedtls-2.28.0
-    SHA512 a5d2694ae87347be7ebf5c32b86d7bb809cc696b549947efb3d12d41d5f726d4f7caed3cc6ee3f3c9b9e46b3c42c4ce8a5f9741b1b0a3c644b6ae615d2f4c55a
+    REF v2.28.1
+    SHA512 b71d052acfb83daff11e0182f32b0ad0af7c59d2b74bd19f270531a3da9ed3ce1d3adcaf756e161bf05a10fe1b6b7753e360e9dbb5b7b123f09201b1202ef689
     HEAD_REF mbedtls-2.28
     PATCHES
         enable-pthread.patch
diff --git a/ports/mbedtls/vcpkg.json b/ports/mbedtls/vcpkg.json
index 93c0e9b222..b0eb96bb46 100644
--- a/ports/mbedtls/vcpkg.json
+++ b/ports/mbedtls/vcpkg.json
@@ -1,6 +1,6 @@
 {
   "name": "mbedtls",
-  "version": "2.28.0",
+  "version": "2.28.1",
   "description": "An open source, portable, easy to use, readable and flexible SSL library",
   "homepage": "https://github.com/ARMmbed/mbedtls",
   "license": "Apache-2.0",
diff --git a/versions/baseline.json b/versions/baseline.json
index 6b96166389..807bb06d39 100644
--- a/versions/baseline.json
+++ b/versions/baseline.json
@@ -4509,7 +4509,7 @@
       "port-version": 0
     },
     "mbedtls": {
-      "baseline": "2.28.0",
+      "baseline": "2.28.1",
       "port-version": 0
     },
     "mcpp": {
diff --git a/versions/m-/mbedtls.json b/versions/m-/mbedtls.json
index 440fc362ea..161576939b 100644
--- a/versions/m-/mbedtls.json
+++ b/versions/m-/mbedtls.json
@@ -1,5 +1,10 @@
 {
   "versions": [
+    {
+      "git-tree": "f6fd876a24f60e3034438c6793627be091ab6426",
+      "version": "2.28.1",
+      "port-version": 0
+    },
     {
       "git-tree": "50e6870207f6a1f0b1e2197978b4403de775eac2",
       "version": "2.28.0",