Vulnerability GHSA-xqr8-7jwr-rhp7
High Risk
HIGH RISK
CVSS Score: 7.5
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
3 years ago
July 25, 2023 at 02:43 PM UTC
Removal of e-Tugra root certificate
2015.04.28 - 2023.5.7
2015.04.28 - 2023.5.7
Summary
Removal of e-Tugra root certificate
Details
Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store. These are in the process of being removed from Mozilla's trust store.
e-Tugra's root certificates are being removed pursuant to an investigation prompted by reporting of security issues in their systems. Conclusions of Mozilla's investigation can be found here.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
6 hours ago
certifi bundles emSign root CAs with compromised intermediate CA keys
2019.3.9 - 2026.10.18 PYSEC-2026-4320
2019.3.9 - 2026.10.18 PYSEC-2026-4320
Critical
8 hours ago
certifi bundles emSign root CAs with compromised intermediate CA keys
2019.3.9 - 2026.10.18 GHSA-6q48-6c7w-9gw2
2019.3.9 - 2026.10.18 GHSA-6q48-6c7w-9gw2
Low Risk
2 years ago
Certifi removes GLOBALTRUST root certificate
2021.5.30 - 2024.6.2 GHSA-248v-346w-9cwc
2021.5.30 - 2024.6.2 GHSA-248v-346w-9cwc
High Risk
2 years ago
No summary available
1.0.0 - 1.0.1 and 2015.04.28 - 2017.4.17 and 2017.7.27.1 - 2024.6.2 PYSEC-2024-230
1.0.0 - 1.0.1 and 2015.04.28 - 2017.4.17 and 2017.7.27.1 - 2024.6.2 PYSEC-2024-230
Unknown
3 years ago
No summary available
2015.04.28 - 2023.5.7 PYSEC-2023-135
2015.04.28 - 2023.5.7 PYSEC-2023-135
Impacted packages
Timeline
Published
3 years ago
July 25, 2023 at 02:43 PM UTC
Fixed (2023.7.22)
3 years ago
July 22, 2023 at 08:39 AM UTC
Last Modified
1 month ago
September 10, 2026 at 03:50 AM UTC