CyberSecBulletin

Certifi vulnerabilities

We track 3 vulnerabilities in Certifi products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on July 5, 2024.

3vulnerabilities
1critical
2high
0exploited
8.3average CVSS score

Latest Certifi vulnerabilities

  • 7.5 High severity

    python-certifi: Insufficient Verification of Data Authenticity

    CVE-2024-39689CertifiEPSS 1.05%

    Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30 and prior to 2024.7.4 recognized root certificates from `GLOBALTRUST`. Certifi

  • 9.8 Critical severity

    python-certifi: Insufficient Verification of Data Authenticity

    CVE-2023-37920Certifi

    Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi prior to version 2023.07.22 recognizes "e-Tugra" root certificates. e-Tugra's root certificates were

  • 7.5 High severity

    python-certifi: Insufficient Verification of Data Authenticity

    CVE-2022-23491Certifi

    Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of