# CVE-2023-37920: Removal of e-Tugra root certificate

Source: https://junglewise.ai/threats/cve-2023-37920-removal-of-e-tugra-root-certificate  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2023-08-03  
License: CC BY 4.0 with a link back

CVE-2023-37920 · Severity: low · CVSS 3.1 · Published 2023-08-03

Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store. These are in the process of being removed from Mozilla's trust store. e-Tugra's root certificates are being removed pursuant to an investigation prompted by reporting of security issues in their systems.

Technologies: [certifi (PyPI)](https://junglewise.ai/threats/technologies/certifi). Vendors: [PyPI](https://junglewise.ai/threats/vendors/pypi).

## Quick answers

**Is CVE-2023-37920 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2023-37920 being exploited in the wild.

**How severe is CVE-2023-37920?** Low severity, with a CVSS score of 3.1, published 3 August 2023.

**Which products and versions are affected?** certifi (PyPI) ECOSYSTEM:introduced=2015.4.28,fixed=2023.7.22.

**Is there a fix for CVE-2023-37920?** Yes. certifi (PyPI): upgrade to 2023.7.22 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**Am I affected by CVE-2023-37920?** Check whether you run certifi (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- certifi (PyPI): upgrade to 2023.7.22 or later

  ```sh
  pip install "certifi>=2023.7.22"
  ```


## Affected products

- certifi (PyPI) ECOSYSTEM:introduced=2015.4.28,fixed=2023.7.22

## Identifiers

- CVE-2023-37920
- GHSA-xqr8-7jwr-rhp7
- PYSEC-2023-135

## Related threats

- [certifi bundled root CA compromised intermediate key exposure](https://junglewise.ai/threats/pysec-2026-4320-certifi-bundles-emsign-root-cas-with-compromised-f1149678)
- [certifi emSign root CAs with compromised intermediate keys](https://junglewise.ai/threats/certifi-bundles-emsign-root-cas-with-compromised-intermediate-ca-keys-e7e757f2)
- [Certifi GLOBALTRUST root certificate removal](https://junglewise.ai/threats/cve-2024-39689-certifi-globaltrust-root-certificate-removal)
- [Certifi removing TrustCor root certificate](https://junglewise.ai/threats/cve-2022-23491-certifi-removing-trustcor-root-certificate)