CVE-2022-23491
2 advisories.
PyPI/certifi CVE-2022-23491: medium 6.8, EPSS 0.53%
Certifi removing TrustCor root certificate
Action: Upgrade certifi to 2022.12.07 or later.
pip install certifi==2022.12.07Affected
| introduced | fixed | last affected |
|---|---|---|
| 2017.11.05 | 2022.12.07 | - |
Fixed versions
| 2022.12.07 |
Sources
- osv: GHSA-43fp-rhv2-5gv8
- https://github.com/certifi/python-certifi/security/advisories/GHSA-43fp-rhv2-5gv8
- https://nvd.nist.gov/vuln/detail/CVE-2022-23491
- https://github.com/certifi/python-certifi/commit/9e9e840925d7b8e76c76fdac1fab7e6e88c1c3b8
- https://github.com/certifi/python-certifi
- https://github.com/pypa/advisory-database/tree/main/vulns/certifi/PYSEC-2022-42986.yaml
- https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/oxX69KFvsm4/m/yLohoVqtCgAJ
- https://security.netapp.com/advisory/ntap-20230223-0010
CVE-2022-23491 · published · modified · JSON
PyPI/certifi CVE-2022-23491: unknown, EPSS 0.53%
Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from
Action: Upgrade certifi to 2022.12.7 or later.
pip install certifi==2022.12.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 2017.11.5 | 2022.12.7 | - |
Fixed versions
| 2022.12.7 |
Sources
- osv: PYSEC-2022-42986
- https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/oxX69KFvsm4/m/yLohoVqtCgAJ
- https://github.com/certifi/python-certifi/security/advisories/GHSA-43fp-rhv2-5gv8
CVE-2022-23491 · published · modified · JSON