Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30 and prior to 2024.7.4 recognized root certificates from `GLOBALTRUST`. Certifi 2024.7.04 removes root certificates from `GLOBALTRUST` from the root store. These are in the process of being removed from Mozilla's trust store. `GLOBALTRUST`'s root certificates are being removed pursuant to an investigation which identified "long-running and unresolved compliance issues."
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-ca-certificates | Aug 14, 2024 | Jul 5, 2024 | |
| Debian | no-fix-debian-deb-package | May 15, 2025 | Jul 5, 2024 | |
| Dell Powerstore Dsa2025086 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Feb 20, 2025 | |
| Suse | — | suse-upgrade-python313-certifi | Dec 5, 2025 | Apr 16, 2025 |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jul 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub