GHSA-5xjx-3w67-w9x9 pypi-publish action revocation of CA in the chain that Sigstore uses in Trusted Publishing and Digital Attestations for PyPI

CriticalCVSS 9.3

Published: 2026-10-30 22:24
Updated: 2026-10-30 22:24
Exploit status: No public exploit known

Description

Summary

The pypi-publish action versions before 1.14.2 used to bundle the emSign root CA trust store certificate through the certifi distribution. It has since been removed through the bundle and the new version no longer includes them.

Details

The certifi-provided TLS trust store is typically used by many projects in the Python ecosystem, including Sigstore that pypi-publish relies on for Trusted Publishing and Digital Attestations.

Related

The external compromise is being tracked at https://emudhra.we-have-a-problem.com

Affected products

Product	Affected versions	Fixed in
pypa/gh-action-pypi-publish(GitHub Actions)	<= 1.14.2	No fix listed

References

github.com vendor-advisory
github.com

CVSS v4.0

9.3 Critical

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Attack Vector: Network
Attack Complexity: Low
Attack Requirements: None
Privileges Required: None
User Interaction: None
Vulnerable System Confidentiality: High
Vulnerable System Integrity: High
Vulnerable System Availability: None
Subsequent System Confidentiality: None
Subsequent System Integrity: None
Subsequent System Availability: None

Weakness & likelihood

EPSS (exploitation probability, 30 days): Not available
CWE: CWE-295 Improper Certificate Validation

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.