Get real-time updates on Telegram
ghsa:GHSA-6Q48-6C7W-9GW2: certifi >= 2019.03.09, < 2026.10.19
certifi bundles emSign root CAs with compromised intermediate CA keys. Affected range: >= 2019.03.09, < 2026.10.19. Fixed version: 2026.10.19.
Affected technology
certifi · >= 2019.03.09, < 2026.10.19
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
An attacker with one of the compromised keys can issue valid-looking certificates for any hostname.
- Product
- certifi
- KEV
- no
Provenance
- GitHub Advisory Database · Source record · observed 2026-10-21 04:17:24.410927+00:00 UTC
Stable permalink: https://cybercodered.org/item/adv-ghsa-ghsa-6q48-6c7w-9gw2.html