GHSA-5xjx-3w67-w9x9
pypi-publish action revocation of CA in the chain that Sigstore uses in Trusted Publishing and Digital Attestations for PyPI
GHSA-5xjx-3w67-w9x9 is a critical vulnerability (CVSS 9.3) in pypa/gh-action-pypi-publish, published October 30, 2026. No source lists public exploit code. Fixed in pypa/gh-action-pypi-publish 1.14.3.
- Severity
- 9.3 CriticalCVSS 4.0, GitHub Advisories
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1.14.3pypa/gh-action-pypi-publish +1 more
Description
Summary
The pypi-publish action versions before 1.14.2 used to bundle the emSign root CA trust store certificate through the certifi distribution. It has since been removed through the bundle and the new version no longer includes them.
Details
The certifi-provided TLS trust store is typically used by many projects in the Python ecosystem, including Sigstore that pypi-publish relies on for Trusted Publishing and Digital Attestations.
Related
The external compromise is being tracked at https://emudhra.we-have-a-problem.com
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- None
Affected packages
| Package | Affected | Fixed |
|---|---|---|
pypa/gh-action-pypi-publishGitHub Actions | through 1.14.2 | 1.14.3 |
pypa/gh-action-pypi-publishGitHub Actions | before 1.14.3, plus listed versions v1.14.2v1.14.1v1.14.0v1.13.0v1.12.4 Show 45 moreShow lessv1.12.3v1.12.2v1.12.1v1.12.0v1.11.0v1.10.3v1.10.2v1.10.1v1.10.0v1.9.0v1.8.14v1.8.13v1.8.12v1.8.11v1.8.10v1.8.9v1.8.8v1.8.7v1.8.6v1.8.5v1.8.4v1.8.3v1.8.2v1.8.1v1.8.0v1.7.1v1.7.0v1.6.5v1.6.4v1.6.3v1.6.2v1.6.1v1.6.0v1.5.2v1.5.1v1.5.0v1.4.2v1.4.1v1.4.0v1.3.1v1.3.0v1.2.2v1.2.1v1.2.0v1.1.0 | 1.14.3 |
What each source reports
GitHub Advisories Score used
pypi-publish action revocation of CA in the chain that Sigstore uses in Trusted Publishing and Digital Attestations for PyPI
Summary
The pypi-publish action versions before 1.14.2 used to bundle the emSign root CA trust store certificate through the certifi distribution. It has since been removed through the bundle and the new version no longer includes them.
Details
The certifi-provided TLS trust store is typically used by many projects in the Python ecosystem, including Sigstore that pypi-publish relies on for Trusted Publishing and Digital Attestations.
Related
The external compromise is being tracked at https://emudhra.we-have-a-problem.com
- Record
GHSA-5xjx-3w67-w9x9- CVSS 4.0
- 9.3 Critical
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N - Weakness
- CWE-295
- Updated
- 2026-11-02
OSV
pypi-publish action revocation of CA in the chain that Sigstore uses in Trusted Publishing and Digital Attestations for PyPI
Summary
The pypi-publish action versions before 1.14.2 used to bundle the emSign root CA trust store certificate through the certifi distribution. It has since been removed through the bundle and the new version no longer includes them.
Details
The certifi-provided TLS trust store is typically used by many projects in the Python ecosystem, including Sigstore that pypi-publish relies on for Trusted Publishing and Digital Attestations.
Related
The external compromise is being tracked at https://emudhra.we-have-a-problem.com
- Record
GHSA-5xjx-3w67-w9x9- CVSS 4.0
- 9.3 Critical
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N - Weakness
- CWE-295
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
Left out here: 1 version. The JSON record has them.