{
  "cveId": "CVE-2022-23491",
  "url": "https://patchblox.com/security/cve/CVE-2022-23491",
  "summary": "CVE-2022-23491 is fixed in 3 products on 1 platform, first by ca-certificates 20211016ubuntu0.18.04.1, released December 7, 2022. It is not reported as exploited. Patch Radar priority: High.",
  "title": "python-certifi: Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while ver...",
  "description": "Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from \u0022TrustCor\u0022 from the root store. These are in the process of being removed from Mozilla\u0027s trust store. TrustCor\u0027s root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor\u0027s ownership also operated a business that produced spyware. Conclusions of Mozilla\u0027s investigation can be found in the linked google group discussion.",
  "published": "2022-12-07T14:15:00Z",
  "severity": "high",
  "cvss": 7.5,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
  "epss": 0.0053,
  "epssPercentile": 0.45051,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "ca-certificates",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "20211016ubuntu0.18.04.1",
      "fix": "ca-certificates 20211016ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-ca-certificates-20211016ubuntu0.18.04.1",
      "released": "2022-12-07T14:15:00Z"
    },
    {
      "platform": "linux",
      "product": "ca-certificates",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "20211016ubuntu0.20.04.1",
      "fix": "ca-certificates 20211016ubuntu0.20.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-ca-certificates-20211016ubuntu0.20.04.1",
      "released": "2022-12-07T14:15:00Z"
    },
    {
      "platform": "linux",
      "product": "ca-certificates",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "20211016ubuntu0.22.04.1",
      "fix": "ca-certificates 20211016ubuntu0.22.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-ca-certificates-20211016ubuntu0.22.04.1",
      "released": "2022-12-07T14:15:00Z"
    },
    {
      "platform": "linux",
      "product": "ca-certificates",
      "release": "amzn 2023",
      "fixedVersion": "2021.2.50-1.0.amzn2023.0.6",
      "fix": "ALAS2023-2023-061",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-061",
      "released": "2023-02-17T20:45:00Z"
    },
    {
      "platform": "linux",
      "product": "python-certifi",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "2023.7.22-1",
      "fix": "DEBIAN-CVE-2022-23491",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-23491",
      "released": "2022-12-07T22:15:09Z"
    },
    {
      "platform": "linux",
      "product": "python-certifi",
      "release": "Debian 14",
      "fixedVersion": "2023.7.22-1",
      "fix": "DEBIAN-CVE-2022-23491",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-23491",
      "released": "2022-12-07T22:15:09Z"
    },
    {
      "platform": "linux",
      "product": "python3-certifi",
      "release": "amzn 2023",
      "fixedVersion": "2022.12.07-1.amzn2023.0.1",
      "fix": "ALAS2023-2023-062",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-062",
      "released": "2023-02-17T20:45:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}