diff --git a/script/tf-coverity/common-def.sh b/script/tf-coverity/common-def.sh
index d616c7c..97aefb6 100644
--- a/script/tf-coverity/common-def.sh
+++ b/script/tf-coverity/common-def.sh
@@ -79,7 +79,7 @@
 
 # mbed TLS source tag to checkout when building Trusted Firmware with
 # cryptography support (e.g. for Trusted Board Boot feature).
-MBED_TLS_SOURCES_TAG="mbedtls-3.6.0"
+MBED_TLS_SOURCES_TAG="mbedtls-3.6.1"
 
 # TF-M variables
 TF_M_TESTS_DIR=tf-m-tests
diff --git a/utils.sh b/utils.sh
index 6d3fdd8..362dafa 100644
--- a/utils.sh
+++ b/utils.sh
@@ -584,7 +584,7 @@
 
 linaro_2001_release="${linaro_2001_release:-$tfa_downloads/linaro/20.01}"
 linaro_release="${linaro_release:-$linaro_2001_release}"
-mbedtls_version="${mbedtls_version:-3.6.0}"
+mbedtls_version="${mbedtls_version:-3.6.1}"
 
 # mbedTLS archive public hosting available at github.com
 mbedtls_archive="${mbedtls_archive:-https://github.com/Mbed-TLS/mbedtls/archive/mbedtls-${mbedtls_version}.tar.gz}"