Read the docs

certifi

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

certifi records in CISA KEV

No certifi vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Certifi 3 records MEDIUM

Records

3 records

TI-2023-19353 CVE-2023-37920 · GHSA-xqr8-7jwr-rhp7

Certifi's removal of e-Tugra root certificate

Priority MEDIUM 49

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00568 Published 2023-07-25 Partial fix · 2023.07.22, 2023.7.22 CWE-345
TI-2024-26613 CVE-2024-39689 · GHSA-248v-346w-9cwc

Certifi removes GLOBALTRUST root certificate

Priority LOW 35

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01049 Published 2024-07-05 Fixed in 2024.7.4 CWE-345
TI-2022-07550 CVE-2022-23491 · GHSA-43fp-rhv2-5gv8

Removal of TrustCor root certificate

Priority LOW 33

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0053 Published 2022-12-07 Partial fix · 2022.12.07 CWE-345
Open these records in search →