{"id":"CVE-2022-23491","aliases":["CLSA-2026-1785934477","DEBIAN-CVE-2022-23491","EUVD-2022-0037","GHSA-43fp-rhv2-5gv8","MGASA-2023-0140","OESA-2023-1457","PYSEC-2022-42986","RHBA-2023:0589","RHSA-2025:9775","ROOT-APP-PYPI-CVE-2022-23491","SUSE-SU-2023:0118-1","SUSE-SU-2023:0119-1","SUSE-SU-2023:0130-1","SUSE-SU-2023:0139-1","UBUNTU-CVE-2022-23491","openSUSE-SU-2024:13237-1","openSUSE-SU-2026:11421-1"],"status":"published","title":"Removal of TrustCor root certificate","description":"Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from \"TrustCor\" from the root store. These are in the process of being removed from Mozilla's trust store. TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found in the linked google group discussion.","severity":{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.0053,"percentile":0.45149,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-345"],"published":"2022-12-07T21:15:53Z","modified":"2026-11-03T08:00:40Z","fixes":[{"ecosystem":"PyPI","package":"certifi","fixed_in":["2022.12.07","2022.12.7"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:13","package":"python-certifi","fixed_in":["2023.7.22-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"python-certifi","fixed_in":["2023.7.22-1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"python-certifi","fixed_in":["2022.12.7-1.mga8"],"sources":["osv"]},{"ecosystem":"Red Hat:ansible_automation_platform:2.3::el8","package":"python39-certifi","fixed_in":["0:2022.12.7-1.el8ap"],"sources":["osv"]},{"ecosystem":"Root:PyPI","package":"certifi","fixed_in":["2020.12.5+aikido.3","2019.11.28+aikido.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"python-certifi","fixed_in":["2018.1.18-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"python-certifi","fixed_in":["2018.1.18-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"python-certifi","fixed_in":["2018.1.18-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"python-certifi","fixed_in":["2018.1.18-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"python-certifi","fixed_in":["2018.1.18-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"python-certifi","fixed_in":["2018.1.18-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"python-certifi","fixed_in":["2018.1.18-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"python-certifi","fixed_in":["2018.1.18-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"python-certifi","fixed_in":["2018.1.18-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"python-certifi","fixed_in":["2018.1.18-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"python-certifi","fixed_in":["2018.1.18-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"python-certifi","fixed_in":["2018.1.18-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"python-certifi","fixed_in":["2018.1.18-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.2","package":"python-certifi","fixed_in":["2018.1.18-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.2","package":"python-certifi","fixed_in":["2018.1.18-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.2","package":"python-certifi","fixed_in":["2018.1.18-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"python-certifi","fixed_in":["2018.1.18-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"python-certifi","fixed_in":["2018.1.18-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"python-certifi","fixed_in":["2018.1.18-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"python-certifi","fixed_in":["2018.1.18-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"python-certifi","fixed_in":["2018.1.18-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.2","package":"python-certifi","fixed_in":["2018.1.18-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.3","package":"python-certifi","fixed_in":["2018.1.18-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"python-certifi","fixed_in":["2018.1.18-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"ca-certificates","fixed_in":["20211016~14.04.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ca-certificates","fixed_in":["20211016~16.04.1~esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"ca-certificates","fixed_in":["20211016ubuntu0.18.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"ca-certificates","fixed_in":["20211016ubuntu0.20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"ca-certificates","fixed_in":["20211016ubuntu0.22.04.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"python-certifi","fixed_in":["2023.7.22-2.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2017.11.05"},{"fixed":"2022.12.07"}]}]},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2021.10.8"},{"fixed":"2021.10.8.post4+tuxcare"}]}],"versions":["2021.10.8","2021.10.8.post1+tuxcare","2021.10.8.post3+tuxcare"],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"python-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2022.9.24-1","2023.11.17-1","2023.7.22-1","2024.12.14+ds-1","2024.6.2-1","2024.8.30+dfsg-1","2024.8.30-1","2025.1.31+ds-1","2025.11.12+ds-1","2026.1.4+ds-1","2026.10.19+ds-1","2026.10.23+ds-1","2026.2.25+ds-1","2026.4.22+ds-1","2026.5.20+ds-1","2026.6.17+ds-1","2026.7.22+ds-1"]},{"source":"osv","ecosystem":"Debian:13","package":"python-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2023.7.22-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"python-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2023.7.22-1"}]}]},{"source":"osv","ecosystem":"PyPI","package":"certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2017.11.05"},{"fixed":"2022.12.07"}]}],"versions":["2017.11.5","2018.1.18","2018.10.15","2018.11.29","2018.4.16","2018.8.13","2018.8.24","2019.11.28","2019.3.9","2019.6.16","2019.9.11","2020.11.8","2020.12.5","2020.4.5","2020.4.5.1","2020.4.5.2","2020.6.20","2021.10.8","2021.5.30","2022.5.18","2022.5.18.1","2022.6.15","2022.6.15.1","2022.6.15.2","2022.9.14","2022.9.24"]},{"source":"osv","ecosystem":"Mageia:8","package":"python-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.12.7-1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"python-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2023.7.22-1.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"python-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2023.7.22-1.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"python-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2023.7.22-1.oe2203sp2"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"python-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2023.7.22-1.oe2203sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"python-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2023.7.22-1.oe2203sp2"}]}],"bundled":2},{"source":"osv","ecosystem":"PyPI","package":"certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2017.11.5"},{"fixed":"2022.12.7"}]}],"versions":["2017.11.5","2018.1.18","2018.10.15","2018.11.29","2018.4.16","2018.8.13","2018.8.24","2019.11.28","2019.3.9","2019.6.16","2019.9.11","2020.11.8","2020.12.5","2020.4.5","2020.4.5.1","2020.4.5.2","2020.6.20","2021.10.8","2021.5.30","2022.5.18","2022.5.18.1","2022.6.15","2022.6.15.1","2022.6.15.2","2022.9.14","2022.9.24"]},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.3::el8","package":"python39-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2022.12.7-1.el8ap"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-exporter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-immutable-object-cache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-immutable-object-cache-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-mds-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-mgr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-mib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-mon-client-nvmeof-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-mon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-osd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-radosgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-resource-agents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"cephadm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"cephadm-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.1.4-1.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"cephfs-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"cephfs-top","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"libcephfs-daemon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"libcephfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"libcephfs-proxy2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"libcephfs-proxy2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"libcephfs2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"libcephfs2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"libcephsqlite-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"liboath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.12-1.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"liboath-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.12-1.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"libpskc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.12-1.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"librados-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"librados-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"librados2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"librados2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"libradospp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"libradosstriper1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"libradosstriper1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"librbd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"librbd1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"librbd1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"librgw-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"librgw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"librgw2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"oath-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.12-1.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"oath-toolkit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.12-1.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"oath-toolkit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.12-1.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"oathtool-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.12-1.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"pam_oath-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.12-1.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"pskctool-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.12-1.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"python3-ceph-argparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"python3-ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"python3-cephfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"python3-cephfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"python3-rados","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"python3-rados-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"python3-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"python3-rbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"python3-rgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"python3-rgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"rbd-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"rbd-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"rbd-nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"rbd-nbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Root:PyPI","package":"certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2020.12.5+aikido.3"},{"fixed":"2019.11.28+aikido.2"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.79.3-58.91.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.79.3-58.91.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.79.3-58.91.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.79.3-58.91.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.79.3-58.91.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.79.3-58.91.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.79.3-58.91.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.79.3-58.91.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.79.3-150400.3.23.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.79.3-150400.3.23.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.79.3-150400.3.23.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.79.3-150400.3.23.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.79.3-150000.3.90.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.79.3-150000.3.90.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.79.3-150000.3.90.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.79.3-150000.3.90.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.79.3-150000.3.90.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.79.3-150000.3.90.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.79.3-150000.3.90.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.79.3-150000.3.90.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.79.3-150000.3.90.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.79.3-150000.3.90.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.79.3-150000.3.90.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.79.3-150000.3.90.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.2","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.79.3-150000.3.90.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.79.3-150000.3.90.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.79.3-150000.3.90.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.79.3-150000.3.90.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.79.3-150000.3.90.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.79.3-150000.3.90.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.79.3-150000.3.90.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.2","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.79.3-150000.3.90.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"python-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2018.1.18-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"python-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2018.1.18-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"python-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2018.1.18-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"python-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2018.1.18-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"python-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2018.1.18-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"python-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2018.1.18-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"python-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2018.1.18-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"python-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2018.1.18-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"python-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2018.1.18-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"python-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2018.1.18-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"python-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2018.1.18-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"python-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2018.1.18-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"python-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2018.1.18-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"python-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2018.1.18-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.2","package":"python-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2018.1.18-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"python-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2018.1.18-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"python-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2018.1.18-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"python-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2018.1.18-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"python-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2018.1.18-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"python-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2018.1.18-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"python-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2018.1.18-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.2","package":"python-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2018.1.18-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"python-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2018.1.18-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"python-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2018.1.18-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"ca-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20211016~14.04.1~esm1"}]}],"versions":["20130610","20130906","20130906ubuntu1","20130906ubuntu2","20141019ubuntu0.14.04.1","20160104ubuntu0.14.04.1","20170717~14.04.1","20170717~14.04.2","20190110~14.04.1~esm1","20190110~14.04.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ca-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20211016~16.04.1~esm2"}]}],"versions":["20150426ubuntu1","20160104ubuntu1","20170717~16.04.1","20170717~16.04.2","20190110~16.04.1","20201027ubuntu0.16.04.1","20210119~16.04.1","20210119~16.04.1ubuntu0.1~esm1","20211016~16.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"ca-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20211016ubuntu0.18.04.1"}]}],"versions":["20170717","20180409","20190110~18.04.1","20201027ubuntu0.18.04.1","20210119~18.04.1","20210119~18.04.2","20211016~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"ca-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20211016ubuntu0.20.04.1"}]}],"versions":["20190110","20190110ubuntu1","20190110ubuntu1.1","20201027ubuntu0.20.04.1","20210119~20.04.1","20210119~20.04.2","20211016~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ca-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20211016ubuntu0.22.04.1"}]}],"versions":["20210119ubuntu1","20211016"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2023.7.22-2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.7.22-1.1"}]}],"bundled":2}],"products":[{"vendor":"certifi","product":"certifi"},{"vendor":"certifi","product":"python-certifi"},{"vendor":"netapp","product":"e-series_performance_analyzer"},{"vendor":"netapp","product":"management_services_for_element_software"},{"vendor":"netapp","product":"management_services_for_netapp_hci"}],"references":[{"url":"https://github.com/certifi/python-certifi/security/advisories/GHSA-43fp-rhv2-5gv8","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory","web","article","report"]},{"url":"https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/oxX69KFvsm4/m/yLohoVqtCgAJ","tags":["x_refsource_MISC","x_transferred","Mailing List","Third Party Advisory","web","report"]},{"url":"https://security.netapp.com/advisory/ntap-20230223-0010/","tags":["Third Party Advisory","advisory"]},{"url":"https://github.com/certifi/python-certifi/commit/9e9e840925d7b8e76c76fdac1fab7e6e88c1c3b8","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23491","tags":["advisory"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/certifi/PYSEC-2022-42986.yaml","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20230223-0010","tags":["web"]},{"url":"https://github.com/advisories/GHSA-43fp-rhv2-5gv8"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23491.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-23491","tags":["advisory"]},{"url":"https://github.com/certifi/python-certifi","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2023-0140.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31248","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5761-1","tags":["advisory"]},{"url":"https://utcc.utoronto.ca/~cks/space/blog/linux/CARootStoreTrustProblem","tags":["web"]},{"url":"https://lists.suse.com/pipermail/sle-security-updates/2023-January/013525.html","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Y3LLORQTVTGQTFXP5FORJ4PISPVZLTEA/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/XVERIAPNA4QIBOA26OBVAYISGS3HRQDC/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1457","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-37920","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHBA-2023:0589","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhba-2023_0589.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23491","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2180089","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23491","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2025:9775","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2006083","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2016889","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2047153","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2089305","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2097853","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2110983","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2121519","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2124175","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2129325","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2134003","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135354","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2146728","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170242","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170243","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186791","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2215374","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2237854","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238814","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241321","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2242261","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2246310","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2250826","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2251887","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253832","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2265371","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268017","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268019","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268021","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268022","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268046","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2269003","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2274719","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2275856","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2277697","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2279578","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2279814","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2282092","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2282276","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2282369","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2282997","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2291163","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2292251","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2292668","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2292787","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2293659","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2293847","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2294000","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2294691","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2295310","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2297166","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2298532","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2299776","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2299777","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2301434","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2303640","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2304314","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2304317","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2305658","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2307146","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2308344","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2308641","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2308647","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2308662","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2309701","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2310433","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2310527","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2310528","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2312578","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2312931","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2313279","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2313407","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2313513","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2314422","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2314626","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2314627","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2314716","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2314855","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2314858","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2314995","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2315072","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2315401","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2315602","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2315603","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2316488","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2316598","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2316975","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2317153","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2317528","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2317735","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2317777","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2317785","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2317969","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2319125","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2319199","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2319356","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2320860","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2321108","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2321568","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2321765","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2322398","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2322664","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2322677","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2323290","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2323601","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2323836","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2323837","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2324227","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2325383","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2325397","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2325408","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2326425","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2327267","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2327311","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2327402","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2327774","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2328008","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2329523","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2330146","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2330769","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2330898","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2330954","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2331411","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2331703","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2331781","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2331790","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2332349","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2335768","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2336352","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2336503","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2336863","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2336885","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2338097","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2338119","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2338126","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2338149","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2338402","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2338406","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2339092","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2341711","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2341761","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2342208","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2342244","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2342747","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2342752","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2342827","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2342909","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2342928","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2343149","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2343732","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2343918","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2343953","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2343968","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2343980","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2344191","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2344352","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2344731","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2344746","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2344993","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2345193","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2345267","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2345288","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2345305","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2345486","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2345488","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2345489","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2345721","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2346615","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2346769","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2346829","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2346896","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2348395","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2348670","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2349010","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2349077","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2350069","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2350186","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2350214","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2350227","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2350260","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2350291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2350295","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2350416","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2350472","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2350551","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2350578","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2350580","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2350592","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2350607","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351028","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351048","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351099","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351161","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351180","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351287","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351292","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351461","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351536","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351558","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351790","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351836","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351842","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351846","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351868","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2352427","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2352499","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2352525","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2352534","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2352585","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2352840","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2352898","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2353013","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2353171","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2353172","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2353305","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2354000","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2354043","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2354192","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2354475","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2354498","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2354499","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2354501","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2354529","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2354788","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2354858","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2354885","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2354903","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2354911","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2355272","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2355303","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2355344","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2355683","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2355686","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2355691","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2355694","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2355703","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2356355","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2356515","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2356526","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2356552","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2356678","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2356802","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2356850","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2356922","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2356923","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2357127","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2357179","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2357422","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2357450","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2357461","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2357464","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2357488","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2358010","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2358143","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2358304","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2358435","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2358455","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2358617","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2358641","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2358769","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2358806","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2358807","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2358816","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2358825","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359017","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359056","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359057","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359062","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359194","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359508","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359515","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359556","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359598","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359678","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359716","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359798","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2360152","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2360666","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2361465","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2361701","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2361737","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2361747","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2361817","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2361828","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2361872","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2362278","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2362289","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2362859","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2362899","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2363085","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2363086","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2363635","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2364290","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2364715","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2365098","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2365146","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2365154","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2365869","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2365926","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2366187","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2366823","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2367319","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2367419","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2367433","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2367444","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2367723","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2368271","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2368715","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2369125","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2369127","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2369129","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2369786","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2369820","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2370002","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2372523","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9775.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-23934","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-23934","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-23934","tags":["advisory"]},{"url":"https://github.com/pallets/werkzeug/commit/cf275f42acad1b5950c50ffe8ef58fe62cdce028","tags":["article"]},{"url":"https://github.com/pallets/werkzeug/releases/tag/2.2.3","tags":["article"]},{"url":"https://github.com/pallets/werkzeug/security/advisories/GHSA-px8h-6qxv-m22q","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-25577","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-25577","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25577","tags":["advisory"]},{"url":"https://github.com/pallets/werkzeug/commit/517cac5a804e8c4dc4ed038bb20dacd038e7a9f1","tags":["article"]},{"url":"https://github.com/pallets/werkzeug/security/advisories/GHSA-xg9f-g7g7-2323","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-46136","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-46136","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-46136","tags":["advisory"]},{"url":"https://github.com/pallets/werkzeug/commit/f3c803b3ade485a45f12b6d6617595350c0f03e2","tags":["article"]},{"url":"https://github.com/pallets/werkzeug/security/advisories/GHSA-hrfv-mqp8-q5rw","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-46159","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-46159","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-46159","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-41184","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-41184","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-41184","tags":["advisory"]},{"url":"https://github.com/acassen/keepalived/issues/2447#issuecomment-2231329734","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-42353","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2305004","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-42353","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-42353","tags":["advisory"]},{"url":"https://github.com/Pylons/webob","tags":["article"]},{"url":"https://github.com/Pylons/webob/commit/f689bcf4f0a1f64f1735b1d5069aef5be6974b5b","tags":["article"]},{"url":"https://github.com/Pylons/webob/security/advisories/GHSA-mg3v-6m49-jhp3","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-47191","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-47191","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47191","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230118-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1204272","tags":["report"]},{"url":"https://bugzilla.suse.com/1207038","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-23491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3479","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230119-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230130-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230139-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1206212","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-23491","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5761-2","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2024-39689","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2022-23491","title":"Removal of TrustCor root certificate","description":"Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from \"TrustCor\" from the root store. These are in the process of being removed from Mozilla's trust store. TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found in the linked google group discussion.","status":"published","published":"2022-12-07T21:15:53.804Z","modified":"2025-04-23T16:31:36.08Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-345"],"updated_at":"2026-11-02T14:34:29.842547Z"}],"euvd":[{"id":"EUVD-2022-0037","description":"Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from \"TrustCor\" from the root store. These are in the process of being removed from Mozilla's trust store. TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found in the linked google group discussion.","status":"published","published":"2022-12-07T21:15:53Z","modified":"2025-04-23T16:31:36Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T20:52:12.313971Z"}],"ghsa":[{"id":"GHSA-43fp-rhv2-5gv8","title":"Certifi removing TrustCor root certificate","description":"Certifi 2022.12.07 removes root certificates from \"TrustCor\" from the root store. These are in the process of being removed from Mozilla's trust store.\n\nTrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found [here](https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/oxX69KFvsm4/m/yLohoVqtCgAJ).","status":"published","published":"2022-12-07T23:05:18Z","modified":"2025-02-12T18:33:28Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N","level":"medium"},{"version":"4.0","score":5.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","level":"medium"}],"cwes":["CWE-345"],"updated_at":"2026-11-02T14:38:30.754382Z"}],"nvd":[{"id":"CVE-2022-23491","description":"Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from \"TrustCor\" from the root store. These are in the process of being removed from Mozilla's trust store. TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found in the linked google group discussion.","status":"published","published":"2022-12-07T22:15:09.87Z","modified":"2026-06-17T04:30:13.707Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-345"],"updated_at":"2026-11-02T14:07:33.239526Z"}],"osv":[{"id":"CVE-2022-23491","title":"Removal of TrustCor root certificate","description":"Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from \"TrustCor\" from the root store. These are in the process of being removed from Mozilla's trust store. TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found in the linked google group discussion.","status":"published","published":"2022-12-07T21:15:53.804Z","modified":"2026-10-28T02:30:28.409723989Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-345"],"updated_at":"2026-11-02T15:44:24.061177Z"},{"id":"DEBIAN-CVE-2022-23491","description":"Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from \"TrustCor\" from the root store. These are in the process of being removed from Mozilla's trust store. TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found in the linked google group discussion.","status":"published","published":"2022-12-07T22:15:09.87Z","modified":"2026-11-03T08:00:40.979998822Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-03T08:25:15.646766Z"},{"id":"GHSA-43fp-rhv2-5gv8","title":"Certifi removing TrustCor root certificate","description":"Certifi 2022.12.07 removes root certificates from \"TrustCor\" from the root store. These are in the process of being removed from Mozilla's trust store.\n\nTrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found [here](https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/oxX69KFvsm4/m/yLohoVqtCgAJ).","status":"published","published":"2022-12-07T23:05:18Z","modified":"2025-02-12T18:53:14.421067Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N","level":"medium"},{"version":"4.0","score":5.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","level":"medium"}],"cwes":["CWE-345"],"updated_at":"2026-11-02T15:46:36.434231Z"},{"id":"OESA-2023-1457","title":"python-certifi security update","description":"Certifi provides Mozilla carefully curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. It has been extracted from the Requests project\r\n\r\nSecurity Fix(es):\r\n\r\nCertifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from \u0026quot;TrustCor\u0026quot; from the root store. These are in the process of being removed from Mozilla\u0026apos;s trust store. TrustCor\u0026apos;s root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor\u0026apos;s ownership also operated a business that produced spyware. Conclusions of Mozilla\u0026apos;s investigation can be found in the linked google group discussion.(CVE-2022-23491)\r\n\r\nCertifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi prior to version 2023.07.22 recognizes \u0026quot;e-Tugra\u0026quot; root certificates. e-Tugra\u0026apos;s root certificates were subject to an investigation prompted by reporting of security issues in their systems. Certifi 2023.07.22 removes root certificates from \u0026quot;e-Tugra\u0026quot; from the root store.(CVE-2023-37920)","status":"published","published":"2023-08-06T11:05:55Z","modified":"2026-08-18T01:17:45.921147089Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"RHBA-2023:0589","title":"Red Hat Bug Fix Advisory: Red Hat Ansible Automation Platform 2.3 Product Release Update","status":"published","published":"2024-09-16T10:35:34Z","modified":"2026-06-26T11:02:17Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHSA-2025:9775","title":"Red Hat Security Advisory: Red Hat Ceph Storage 8.1 security, bug fix, and enhancement updates","status":"published","published":"2025-06-27T10:05:48Z","modified":"2026-10-16T10:09:28Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"ROOT-APP-PYPI-CVE-2022-23491","title":"CVE-2022-23491 in certifi - Patched by Root","description":"Root has patched CVE-2022-23491 in the certifi package for Root:PyPI. Multiple fixed versions available.","status":"published","published":"2026-10-27T09:29:56Z","modified":"2026-10-27T10:15:16.926777467Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:27.940619Z"},{"id":"UBUNTU-CVE-2022-23491","description":"Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from \"TrustCor\" from the root store. These are in the process of being removed from Mozilla's trust store. TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found in the linked google group discussion.","status":"published","published":"2022-12-07T22:15:00Z","modified":"2026-02-04T03:54:10.76017Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"},{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T16:53:53.13624Z"},{"id":"CLSA-2026-1785934477","title":"TuxCare security update for certifi (2 CVEs)","description":"TuxCare rebuilt certifi to address 2 CVEs. Fixed in 2021.10.8.post4+tuxcare.","status":"published","published":"2026-08-05T12:54:37Z","modified":"2026-10-15T09:48:05.162355503Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"MGASA-2023-0140","title":"Updated python-certifi packages fix security vulnerability","description":"Disable bundled Trustcor root cerificate signatures generated after\nWednesday November 30 00:00:00 2022. (CVE-2022-23491)\n","status":"published","published":"2023-04-15T19:03:44Z","modified":"2026-04-16T04:44:18.433580659Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:13237-1","title":"python310-certifi-2023.7.22-2.1 on GA media","description":"These are all security issues fixed in the python310-certifi-2023.7.22-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:19:23.022862Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"openSUSE-SU-2026:11421-1","title":"python313-certifi-2026.7.22-1.1 on GA media","description":"These are all security issues fixed in the python313-certifi-2026.7.22-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-08-01T00:00:00Z","modified":"2026-08-02T11:45:08.018981293Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"PYSEC-2022-42986","description":"Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from \"TrustCor\" from the root store. These are in the process of being removed from Mozilla's trust store. TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found in the linked google group discussion.","status":"published","published":"2022-12-07T22:15:00Z","modified":"2023-11-08T04:08:19.066843Z","updated_at":"2026-11-02T15:52:53.449407Z"},{"id":"SUSE-SU-2023:0118-1","title":"Security update for mozilla-nss","description":"This update for mozilla-nss fixes the following issues:\n\n- CVE-2022-3479: Fixed a potential crash that could be triggered when\n  a server requested a client authentication certificate, but the\n  client had no certificates stored (bsc#1204272).\n- Updated to version 3.79.3 (bsc#1207038):\n  - CVE-2022-23491: Removed trust for 3 root certificates from TrustCor.\n","status":"published","published":"2023-01-20T09:27:44Z","modified":"2025-05-02T04:32:48.443943Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0119-1","title":"Security update for mozilla-nss","description":"This update for mozilla-nss fixes the following issues:\n\n- CVE-2022-3479: Fixed a potential crash that could be triggered when\n  a server requested a client authentication certificate, but the\n  client had no certificates stored (bsc#1204272).\n- Updated to version 3.79.3 (bsc#1207038):\n  - CVE-2022-23491: Removed trust for 3 root certificates from TrustCor.\n","status":"published","published":"2023-01-20T09:28:13Z","modified":"2026-02-04T04:39:50.32984Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0130-1","title":"Security update for mozilla-nss","description":"This update for mozilla-nss fixes the following issues:\n\n- CVE-2022-3479: Fixed a potential crash that could be triggered when\n  a server requested a client authentication certificate, but the\n  client had no certificates stored (bsc#1204272).\n- Updated to version 3.79.3 (bsc#1207038):\n  - CVE-2022-23491: Removed trust for 3 root certificates from TrustCor.\n","status":"published","published":"2023-01-24T14:22:55Z","modified":"2026-02-04T04:31:00.233029Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0139-1","title":"Security update for python-certifi","description":"This update for python-certifi fixes the following issues:\n\n- remove all TrustCor CAs, as TrustCor issued multiple man-in-the-middle\n  certs (bsc#1206212 CVE-2022-23491)\n     - TrustCor RootCert CA-1\n     - TrustCor RootCert CA-2\n     - TrustCor ECA-1\n- Add removeTrustCor.patch\n","status":"published","published":"2023-01-25T13:42:21Z","modified":"2025-05-02T04:32:48.626041Z","updated_at":"2026-11-02T15:53:51.853735Z"}]}}