Homepage
About Snyk

certifi@2022.12.7 vulnerabilities

Python package for providing Mozilla's CA Bundle.

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the certifi package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • C
Improper Following of a Certificate's Chain of Trust

Affected versions of this package are vulnerable to Improper Following of a Certificate's Chain of Trust. E-Tugra's root certificates are being removed pursuant to an investigation prompted by reporting of security issues in their systems. Conclusions of Mozilla's investigation can be found here.

Note:

This issue is not an inherent vulnerability in the package, but a security measure against potential harmful effects of trusting the now-revoked root certificates.

How to fix Improper Following of a Certificate's Chain of Trust?

Upgrade certifi to version 2023.7.22 or higher.

[2015.04.28,2023.7.22)
Go back to all versions of this package