{"id":"GHSA-5xjx-3w67-w9x9","title":"pypi-publish action revocation of CA in the chain that Sigstore uses in Trusted Publishing and Digital Attestations for PyPI","summary":"pypi-publish action revocation of CA in the chain that Sigstore uses in Trusted Publishing and Digital Attestations for PyPI","severity":"critical","cwe":["CWE-295"],"vendor":"pypa","product":"pypa/gh-action-pypi-publish","ecosystem":"actions","affected":["pypa/gh-action-pypi-publish <= 1.14.2"],"patched":["pypa/gh-action-pypi-publish 1.14.3"],"published":"2026-10-30","updated":"2026-10-30","sourceUpdated":"2026-10-30T20:24:25Z","source":"GHSA","sourceUrl":"https://github.com/advisories/GHSA-5xjx-3w67-w9x9","references":[{"url":"https://github.com/pypa/gh-action-pypi-publish/security/advisories/GHSA-5xjx-3w67-w9x9"},{"url":"https://github.com/advisories/GHSA-5xjx-3w67-w9x9"}],"tags":["ghsa","actions"],"ingestedAt":"2026-10-30T21:09:21.488Z","slug":"GHSA-5xjx-3w67-w9x9","body":"## Overview\n\n### Summary\n\nThe [pypi-publish action][pypi-publish] versions before 1.14.2 used to bundle the `emSign` root CA trust store certificate through the `certifi` distribution. It has since been removed through the bundle and the new version no longer includes them.\n\n[pypi-publish]: https://github.com/marketplace/actions/pypi-publish\n\n### Details\n\nThe `certifi`-provided TLS trust store is typically used by many projects in the Python ecosystem, including Sigstore that [pypi-publish] relies on for Trusted Publishing and Digital Attestations.\n\n### Related\n\nThe external compromise is being tracked at https://emudhra.we-have-a-problem.com\n\n## Affected packages\n\n- `pypa/gh-action-pypi-publish <= 1.14.2`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `pypa/gh-action-pypi-publish 1.14.3`","depth":"midnight","depthScore":52,"depthScoreParts":{"impact":52.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}