PyPI/certifi CVE-2022-23491: medium 6.8, EPSS 0.53%

Certifi removing TrustCor root certificate

Action: Upgrade certifi to 2022.12.07 or later.

pip install certifi==2022.12.07

Affected

Fixed versions

Sources

• osv: GHSA-43fp-rhv2-5gv8
• https://github.com/certifi/python-certifi/security/advisories/GHSA-43fp-rhv2-5gv8
• https://nvd.nist.gov/vuln/detail/CVE-2022-23491
• https://github.com/certifi/python-certifi/commit/9e9e840925d7b8e76c76fdac1fab7e6e88c1c3b8
• https://github.com/certifi/python-certifi
• https://github.com/pypa/advisory-database/tree/main/vulns/certifi/PYSEC-2022-42986.yaml
• https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/oxX69KFvsm4/m/yLohoVqtCgAJ
• https://security.netapp.com/advisory/ntap-20230223-0010

CVE-2022-23491 · published 2022-12-07T23:05:18Z · modified 2025-02-12T18:53:14.421067Z · JSON