PyPI/certifi CVE-2022-23491: unknown, EPSS 0.53%
Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from
Action: Upgrade certifi to 2022.12.7 or later.
pip install certifi==2022.12.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 2017.11.5 | 2022.12.7 | - |
Fixed versions
| 2022.12.7 |
Sources
- osv: PYSEC-2022-42986
- https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/oxX69KFvsm4/m/yLohoVqtCgAJ
- https://github.com/certifi/python-certifi/security/advisories/GHSA-43fp-rhv2-5gv8
CVE-2022-23491 · published · modified · JSON