PyPI: certifi

SFTY-20240308-07183

Safety legacy ID: pyup.io-65987

certifi before 2017.04.17 is vulnerable to improper certificate validation because they do not reject deprecated 1024-bit certificates, but instead only issue a warning. This vulnerability impacts the security of the package's certificate verification process. https://github.com/certifi/python-certifi/commit/4f35e3529c78ced74040cf5d80bf8ec4aac9a190

PythonPyPI
Created at: Nov 5, 2025Updated at: Nov 5, 2025

Overview

certifi before 2017.04.17 is vulnerable to improper certificate validation because they do not reject deprecated 1024-bit certificates, but instead only issue a warning. This vulnerability impacts the security of the package's certificate verification process. https://github.com/certifi/python-certifi/commit/4f35e3529c78ced74040cf5d80bf8ec4aac9a190

Advisory

certifi before 2017.04.17 is vulnerable to improper certificate validation because they do not reject deprecated 1024-bit certificates, but instead only issue a warning. This vulnerability impacts the security of the package's certificate verification process. https://github.com/certifi/python-certifi/commit/4f35e3529c78ced74040cf5d80bf8ec4aac9a190

Affected Package

Affecting certifi package, versions>=0,<2017.04.17

Also affects

---

How to Fix

Upgradecertifito2017.4.17or higher.

Mitigation and Workarounds

---

Vulnerable Functions

Functions linked to known vulnerabilities.

Vulnerable function data is available for Enterprise customers

Book a call with us to see Safety in action.

References

Safety

Verified by Safety

Our Cybersecurity Intelligence Team reviewed this vulnerability. We combine public data with our own research to find issues not yet reported to public sources.

Learn more