{"action":"Upgrade certifi to 2022.12.7 or later.","affected":[{"fixed":"2022.12.7","introduced":"2017.11.5"}],"component":"certifi","cve_ids":["CVE-2022-23491"],"ecosystem":"PyPI","epss":0.0053,"exploited":false,"fixed_versions":["2022.12.7"],"ghsa_id":"GHSA-43fp-rhv2-5gv8","id":"tcs_01M5KGH98F6H6MNJ7QBTKKN2PD","modified_at":"2023-11-08T04:08:19.066843Z","published_at":"2022-12-07T22:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-42986","https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/oxX69KFvsm4/m/yLohoVqtCgAJ","https://github.com/certifi/python-certifi/security/advisories/GHSA-43fp-rhv2-5gv8"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2022-42986","url":"https://osv.dev/vulnerability/PYSEC-2022-42986"}],"summary":"Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from"}