{"action":"Upgrade certifi to 2023.7.22 or later.","affected":[{"fixed":"2023.7.22","introduced":"2015.4.28"}],"component":"certifi","cve_ids":["CVE-2023-37920"],"ecosystem":"PyPI","epss":0.00568,"exploited":false,"fixed_versions":["2023.7.22"],"ghsa_id":"GHSA-xqr8-7jwr-rhp7","id":"tcs_01M5KGJFB3T59AJ49Q9SRZQS5F","modified_at":"2023-11-08T04:13:04.801823Z","published_at":"2023-08-03T19:36:12Z","references":["https://osv.dev/vulnerability/PYSEC-2023-135","https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/C-HrP1SEq1A","https://github.com/certifi/python-certifi/commit/8fb96ed81f71e7097ed11bc4d9b19afd7ea5c909","https://nvd.nist.gov/vuln/detail/CVE-2023-37920","https://github.com/certifi/python-certifi/security/advisories/GHSA-xqr8-7jwr-rhp7"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2023-135","url":"https://osv.dev/vulnerability/PYSEC-2023-135"}],"summary":"Certifi 2023.07.22 removes root certificates from \"e-Tugra\" from the root store. These are in the process of being removed from Mozilla's trust store. e-Tugra's root certificates are being removed pur"}