GHSA-5xjx-3w67-w9x9
pypi-publish action revocation of CA in the chain that Sigstore uses in Trusted Publishing and Digital Attestations for PyPI
- Risk score
- 61/100
- CVSS
- 9.3 v4.0
- Published
- 30 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- The [pypi-publish action][pypi-publish] versions before 1.14.2 used to bundle the emSign root CA trust store certificate through the certifi distribution. It has since been removed through the bundle and the new version no longer includes them. [pypi-publish]: https://github.com/marketplace/actions/pypi-publish The ce…
- Affected
- pypa/gh-action-pypi-publish (actions) <= 1.14.2
- Fix
- Upgrade pypa/gh-action-pypi-publish to 1.14.3 or later.
- Exploitation
- No known exploitation
Why it is Amber
- CVSS 9.3 critical
- Remotely exploitable without logging in
Affected packages
| Package | Ecosystem | Vulnerable | Fixed in |
|---|---|---|---|
| pypa/gh-action-pypi-publish | actions | <= 1.14.2 | 1.14.3 |
References
Original description
### Summary The [pypi-publish action][pypi-publish] versions before 1.14.2 used to bundle the `emSign` root CA trust store certificate through the `certifi` distribution. It has since been removed through the bundle and the new version no longer includes them. [pypi-publish]: https://github.com/marketplace/actions/pypi-publish ### Details The `certifi`-provided TLS trust store is typically used by many projects in the Python ecosystem, including Sigstore that [pypi-publish] relies on for Trusted Publishing and Digital Attestations. ### Related The external compromise is being tracked at https://emudhra.we-have-a-problem.com
Last activity 30 Oct 2026. Patch Forecast updates every hour.