Vulnerability GHSA-248v-346w-9cwc
Low Risk
LOW RISK
CVSS Score: 3.0
Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
2 years ago
July 05, 2024 at 08:06 PM UTC
Certifi removes GLOBALTRUST root certificate
2021.5.30 - 2024.6.2
2021.5.30 - 2024.6.2
Summary
Certifi removes GLOBALTRUST root certificate
Details
Certifi 2024.07.04 removes root certificates from "GLOBALTRUST" from the root store. These are in the process of being removed from Mozilla's trust store.
GLOBALTRUST's root certificates are being removed pursuant to an investigation which identified "long-running and unresolved compliance issues". Conclusions of Mozilla's investigation can be found here.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
6 hours ago
certifi bundles emSign root CAs with compromised intermediate CA keys
2019.3.9 - 2026.10.18 PYSEC-2026-4320
2019.3.9 - 2026.10.18 PYSEC-2026-4320
Critical
8 hours ago
certifi bundles emSign root CAs with compromised intermediate CA keys
2019.3.9 - 2026.10.18 GHSA-6q48-6c7w-9gw2
2019.3.9 - 2026.10.18 GHSA-6q48-6c7w-9gw2
High Risk
2 years ago
No summary available
1.0.0 - 1.0.1 and 2015.04.28 - 2017.4.17 and 2017.7.27.1 - 2024.6.2 PYSEC-2024-230
1.0.0 - 1.0.1 and 2015.04.28 - 2017.4.17 and 2017.7.27.1 - 2024.6.2 PYSEC-2024-230
Unknown
3 years ago
No summary available
2015.04.28 - 2023.5.7 PYSEC-2023-135
2015.04.28 - 2023.5.7 PYSEC-2023-135
High Risk
3 years ago
Removal of e-Tugra root certificate
2015.04.28 - 2023.5.7 GHSA-xqr8-7jwr-rhp7
2015.04.28 - 2023.5.7 GHSA-xqr8-7jwr-rhp7
Impacted packages
Timeline
Published
2 years ago
July 05, 2024 at 08:06 PM UTC
Fixed (2024.7.4)
2 years ago
July 04, 2024 at 01:36 AM UTC
Last Modified
1 month ago
September 10, 2026 at 03:50 AM UTC