certifi@2024.6.2 vulnerabilities

Python package for providing Mozilla's CA Bundle.

  • latest version

    2024.12.14

  • latest non vulnerable version

  • first published

    12 years ago

  • latest version published

    4 days ago

  • licenses detected

  • Direct Vulnerabilities

    Known vulnerabilities in the certifi package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Insufficient Verification of Data Authenticity

    Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity due to the presence of the root certificate for GLOBALTRUST in the root store. The root certificates are being removed pursuant to an investigation into non-compliance.

    How to fix Insufficient Verification of Data Authenticity?

    Upgrade certifi to version 2024.7.4 or higher.

    [2021.5.30,2024.7.4)