I think updating the version in Espruino would be a good idea, as there have been a bunch of bugfixes since then including a bunch of security fixes....
Espruino is a JavaScript interpreter for low-power Microcontrollers. This site is both a support community for Espruino and a place to share what you are working on.
We could try and update the mbed TLS version that's in Espruino? I doubt it would be too painful...