CVE-2023-37920: PYSEC-2023-135 - Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store. These are in the process of being removed from Mozilla's tr

CVE-2023-37920 · Severity: low · CVSS 3.1 · Published 2023-08-03

Technologies: certifi (PyPI). Vendors: PyPI.

Executive brief

Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store. These are in the process of being removed from Mozilla's trust store. e-Tugra's root certificates are being removed pursuant to an investigation prompted by reporting of security issues in their systems.

Affected products

PyPI certifi

Related threats

PYSEC-2024-230 - Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of
PYSEC-2022-42986 - Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of