{"action":"Upgrade certifi to 2022.12.07 or later.","affected":[{"fixed":"2022.12.07","introduced":"2017.11.05"}],"component":"certifi","cve_ids":["CVE-2022-23491"],"ecosystem":"PyPI","epss":0.0053,"exploited":false,"fixed_versions":["2022.12.07"],"ghsa_id":"GHSA-43fp-rhv2-5gv8","id":"tcs_01M5KEX1K61CPNRSEBQ3F13TVD","modified_at":"2025-02-12T18:53:14.421067Z","published_at":"2022-12-07T23:05:18Z","references":["https://osv.dev/vulnerability/GHSA-43fp-rhv2-5gv8","https://github.com/certifi/python-certifi/security/advisories/GHSA-43fp-rhv2-5gv8","https://nvd.nist.gov/vuln/detail/CVE-2022-23491","https://github.com/certifi/python-certifi/commit/9e9e840925d7b8e76c76fdac1fab7e6e88c1c3b8","https://github.com/certifi/python-certifi","https://github.com/pypa/advisory-database/tree/main/vulns/certifi/PYSEC-2022-42986.yaml","https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/oxX69KFvsm4/m/yLohoVqtCgAJ","https://security.netapp.com/advisory/ntap-20230223-0010"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"GHSA-43fp-rhv2-5gv8","url":"https://osv.dev/vulnerability/GHSA-43fp-rhv2-5gv8"}],"summary":"Certifi removing TrustCor root certificate"}