Loading...
Skip to main content
GeekWala

CVE-2024-39689 — Vulnerability in certifi — CVE Details

LOW

Certifi removes GLOBALTRUST root certificate

Published July 5, 2024Updated September 10, 2026Source: osv

What Should I Do?

Low-to-Moderate Risk

Exploitation probability is 21.23% in 30 days. Address in your next planned sprint.

Summary

Certifi 2024.07.04 removes root certificates from "GLOBALTRUST" from the root store. These are in the process of being removed from Mozilla's trust store. GLOBALTRUST's root certificates are being removed pursuant to an investigation which identified "long-running and unresolved compliance issues". Conclusions of Mozilla's investigation can be found [here]( https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/XpknYMPO8dI).

Advisory Timeline

  • First published July 5, 2024 (829 days ago).
  • Last revised September 10, 2026 — 796 days after initial publication.

Remediation

Upgrade to the fixed version using your package manager.

pip
Update certifi to 2024.7.4 or later
pip install "certifi>=2024.7.4"

After upgrading, run your dependency scanner again to confirm the vulnerability is resolved.

Affected Packages (1)

Affects 1 ecosystem: pypi (1).

PackageEcosystemAffectedFixed In
certifi
pypi
2021.10.8, 2021.5.30, 2022.12.7, 2022.5.18 (+11 more)2024.7.4

Vulnerability Classification

Common Weakness Enumeration (CWE) identifiers for this vulnerability type.

  • CWE-345
    Insufficient Verification of Data AuthenticityMITRE

References

Frequently Asked Questions

What is CVE-2024-39689?
Certifi removes GLOBALTRUST root certificate This vulnerability has been assigned a severity rating of LOW.
How do I check if my project is affected by CVE-2024-39689?
CVE-2024-39689 affects certifi. It has a 21.2% probability of exploitation within 30 days (EPSS score). Use GeekWala's free vulnerability scanner to check your dependencies against CVE-2024-39689 and 200,000+ other known vulnerabilities.

Severity & Exploitability

EPSS Score (30-day exploit probability)
21.23%
Higher than 96% of vulnerabilities

This places it in the top 5% of EPSS-scored vulnerabilities — 95.5% of tracked vulnerabilities score at or below it, so it is far more likely to be exploited than nearly all other tracked vulnerabilities.

Also Known As

GHSA-248v-346w-9cwc
PYSEC-2024-230

Related CVEs

  • CVE-2024-53947
    LOW

    Apache Superset: Improper SQL authorisation, parse not checking for specific postgres functions

  • CVE-2025-50460
    LOW

    MS SWIFT Remote Code Execution via unsafe PyYAML deserialization

More PyPI advisories

Check if you're affected

Scan your dependencies to see if this vulnerability affects your projects.

Scan Your Dependencies