CVE-2024-39689
2 advisories.
PyPI/certifi CVE-2024-39689: low
Certifi removes GLOBALTRUST root certificate
Action: Upgrade certifi to 2024.7.4 or later.
pip install certifi==2024.7.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 2021.5.30 | 2024.7.4 | - |
Fixed versions
| 2024.7.4 |
Sources
- osv: GHSA-248v-346w-9cwc
- https://github.com/certifi/python-certifi/security/advisories/GHSA-248v-346w-9cwc
- https://nvd.nist.gov/vuln/detail/CVE-2024-39689
- https://github.com/certifi/python-certifi/commit/bd8153872e9c6fc98f4023df9c2deaffea2fa463
- https://github.com/certifi/python-certifi
- https://github.com/pypa/advisory-database/tree/main/vulns/certifi/PYSEC-2024-230.yaml
- https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/XpknYMPO8dI
- https://security.netapp.com/advisory/ntap-20241206-0001
CVE-2024-39689 · published · modified · JSON
PyPI/certifi CVE-2024-39689: high 7.5
Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.05.30 and prior to 2024.
Action: Upgrade certifi to 2024.7.4 or later.
pip install certifi==2024.7.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 2021.5.30 | 2024.7.4 | - |
Fixed versions
| 2024.7.4 |
Sources
- osv: PYSEC-2024-230
- https://github.com/certifi/python-certifi/security/advisories/GHSA-248v-346w-9cwc
- https://security.netapp.com/advisory/ntap-20241206-0001/
- https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/XpknYMPO8dI
- https://github.com/certifi/python-certifi/commit/bd8153872e9c6fc98f4023df9c2deaffea2fa463
- https://github.com/advisories/GHSA-248v-346w-9cwc
CVE-2024-39689 · published · modified · JSON