PyPI/certifi CVE-2024-39689: low, EPSS 1.05%

Certifi removes GLOBALTRUST root certificate

Action: Upgrade certifi to 2024.7.4 or later.

pip install certifi==2024.7.4

Affected

Fixed versions

Sources

• osv: GHSA-248v-346w-9cwc
• https://github.com/certifi/python-certifi/security/advisories/GHSA-248v-346w-9cwc
• https://nvd.nist.gov/vuln/detail/CVE-2024-39689
• https://github.com/certifi/python-certifi/commit/bd8153872e9c6fc98f4023df9c2deaffea2fa463
• https://github.com/certifi/python-certifi
• https://github.com/pypa/advisory-database/tree/main/vulns/certifi/PYSEC-2024-230.yaml
• https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/XpknYMPO8dI
• https://security.netapp.com/advisory/ntap-20241206-0001

CVE-2024-39689 · published 2024-07-05T20:06:40Z · modified 2026-09-10T03:50:15.994602411Z · JSON