InfraTest

DO NOT DEPLOY UNLESS FOR LEARNING ABOUT AWS!!! Currently vulnerable to CVE-2024-39689. We need to update Certifi. Check dependabot before deploying. Trusting an unverified Certificate Authority can have major loss of customer trust issues...

ROOT-APP-PYPI-GHSA-6Q48-6C7W-9GW2 GHSA-6q48-6c7w-9gw2 in certifi - Patched by Root

Root has patched GHSA-6q48-6c7w-9gw2 in the certifi package for Root:PyPI. Multiple fixed versions available...

SUSE CVE-2026-117611

Improper certificate validation in Checkmk 2.5.0p18, 2.4.0p39, 2.3.0p52 and 2.2.0 EOL: the Certificate Authority stores bundled with "certifi" and "webpki-roots" include a root CA that trusts eMudhra emSign intermediate certificates whose private keys are public...

Fedora 45 : mingw-python-certifi (2026-f7c7c6a7de)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f7c7c6a7de advisory. Update to certifi-2026.10.18. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not test...

pypi-publish action revocation of CA in the chain that Sigstore uses in Trusted Publishing and Digital Attestations for PyPI

Summary The pypi-publish actionpypi-publish versions before 1.14.2 used to bundle the emSign root CA trust store certificate through the certifi distribution. It has since been removed through the bundle and the new version no longer includes them. pypi-publish:...

GHSA-5XJX-3W67-W9X9 pypi-publish action revocation of CA in the chain that Sigstore uses in Trusted Publishing and Digital Attestations for PyPI

Summary The pypi-publish actionpypi-publish versions before 1.14.2 used to bundle the emSign root CA trust store certificate through the certifi distribution. It has since been removed through the bundle and the new version no longer includes them. pypi-publish:...

Fedora 43 : mingw-python-certifi (2026-f82897416f)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f82897416f advisory. Update to certifi-2026.10.18. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not test...

Fedora 44 : mingw-python-certifi (2026-746612ff80)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-746612ff80 advisory. Update to certifi-2026.10.18. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not test...

CVE-2026-117611

Improper certificate validation in Checkmk 2.5.0p18, 2.4.0p39, 2.3.0p52 and 2.2.0 EOL: the Certificate Authority stores bundled with "certifi" and "webpki-roots" include a root CA that trusts eMudhra emSign intermediate certificates whose private keys are public...

CVE-2026-117611 Trust of compromised eMudhra root CA in bundled CA stores

Improper certificate validation in Checkmk 2.5.0p18, 2.4.0p39, 2.3.0p52 and 2.2.0 EOL: the Certificate Authority stores bundled with "certifi" and "webpki-roots" include a root CA that trusts eMudhra emSign intermediate certificates whose private keys are public...

CVE-2026-117611 Trust of compromised eMudhra root CA in bundled CA stores

Improper certificate validation in Checkmk 2.5.0p18, 2.4.0p39, 2.3.0p52 and 2.2.0 EOL: the Certificate Authority stores bundled with "certifi" and "webpki-roots" include a root CA that trusts eMudhra emSign intermediate certificates whose private keys are public...

EUVD-2026-112694

Improper certificate validation in Checkmk 2.5.0p18, 2.4.0p39, 2.3.0p52 and 2.2.0 EOL: the Certificate Authority stores bundled with "certifi" and "webpki-roots" include a root CA that trusts eMudhra emSign intermediate certificates whose private keys are public...

CVE-2026-117611

The monitoring software Checkmk versions <2.5.0p18, <2.4.0p39,

CVE-2026-117611: Checkmk GmbH Checkmk: Improper certificate validation in Checkmk <2.5.0p18, <2.4.0p39, <2.3.0p52 and 2.2.0 (EOL): the Certificate Authority…

Improper certificate validation in Checkmk 2.5.0p18, 2.4.0p39, 2.3.0p52 and 2.2.0 EOL: the Certificate Authority stores bundled with "certifi" and "webpki-roots" include a root CA that trusts eMudhra emSign intermediate certificates whose private keys are public...

PT-2026-130687

Improper certificate validation in Checkmk 2.5.0p18, 2.4.0p39, 2.3.0p52 and 2.2.0 EOL: the Certificate Authority stores bundled with "certifi" and "webpki-roots" include a root CA that trusts eMudhra emSign intermediate certificates whose private keys are public...

Checkmk encryption issue vulnerability

Versions prior to Checkmk 2.5.0p18, 2.4.0p39, 2.3.0p52, and 2.2.0 contain an encryption-related vulnerability stemming from improper certificate validation. The bundled certifi and webpki-roots certificates issued by the eMudhra emSign root CA include intermediate certificates whose private keys...

ROOT-APP-PYPI-CVE-2023-37920 CVE-2023-37920 in certifi - Patched by Root

Root has patched CVE-2023-37920 in the certifi package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2022-23491 CVE-2022-23491 in certifi - Patched by Root

Root has patched CVE-2022-23491 in the certifi package for Root:PyPI. Multiple fixed versions available...

CVE-2026-115693

Improper Certificate Validation vulnerability in hackneyssl in benoitc hackney allows an on-path attacker to impersonate a server pinned to a private certificate authority via a certificate chain that ends in a publicly trusted root. hackney adds partialchain, fun hackneyssl:partialchain/1 to eve...

[slackware-security] python-certifi

New python-certifi packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/python-certifi-2026.10.23-i586-1slack15.0.txz: Upgraded. Remove more eMudhra certificates. Security fix Where to find the new...