Vulnerability PYSEC-2024-230
High Risk
HIGH RISK
CVSS Score: 7.5
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
2 years ago
July 05, 2024 at 07:15 PM UTC
No summary available
1.0.0 - 1.0.1 and 2015.04.28 - 2017.4.17 and 2017.7.27.1 - 2024.6.2
1.0.0 - 1.0.1 and 2015.04.28 - 2017.4.17 and 2017.7.27.1 - 2024.6.2
Details
Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.05.30 and prior to 2024.07.4 recognized root certificates from GLOBALTRUST. Certifi 2024.07.04 removes root certificates from GLOBALTRUST from the root store. These are in the process of being removed from Mozilla's trust store. GLOBALTRUST's root certificates are being removed pursuant to an investigation which identified "long-running and unresolved compliance issues."
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
6 hours ago
certifi bundles emSign root CAs with compromised intermediate CA keys
2019.3.9 - 2026.10.18 PYSEC-2026-4320
2019.3.9 - 2026.10.18 PYSEC-2026-4320
Critical
8 hours ago
certifi bundles emSign root CAs with compromised intermediate CA keys
2019.3.9 - 2026.10.18 GHSA-6q48-6c7w-9gw2
2019.3.9 - 2026.10.18 GHSA-6q48-6c7w-9gw2
Low Risk
2 years ago
Certifi removes GLOBALTRUST root certificate
2021.5.30 - 2024.6.2 GHSA-248v-346w-9cwc
2021.5.30 - 2024.6.2 GHSA-248v-346w-9cwc
Unknown
3 years ago
No summary available
2015.04.28 - 2023.5.7 PYSEC-2023-135
2015.04.28 - 2023.5.7 PYSEC-2023-135
High Risk
3 years ago
Removal of e-Tugra root certificate
2015.04.28 - 2023.5.7 GHSA-xqr8-7jwr-rhp7
2015.04.28 - 2023.5.7 GHSA-xqr8-7jwr-rhp7
Impacted packages
Timeline
Published
2 years ago
July 05, 2024 at 07:15 PM UTC
Fixed (2024.7.4)
2 years ago
July 04, 2024 at 01:36 AM UTC
Last Modified
4 months ago
June 10, 2026 at 05:14 PM UTC