---
id: GHSA-5xjx-3w67-w9x9
title: >-
  pypi-publish action revocation of CA in the chain that Sigstore uses in
  Trusted Publishing and Digital Attestations for PyPI
summary: >-
  pypi-publish action revocation of CA in the chain that Sigstore uses in
  Trusted Publishing and Digital Attestations for PyPI
severity: critical
cwe:
  - CWE-295
vendor: pypa
product: pypa/gh-action-pypi-publish
ecosystem: actions
affected:
  - pypa/gh-action-pypi-publish <= 1.14.2
patched:
  - pypa/gh-action-pypi-publish 1.14.3
published: '2026-10-30'
updated: '2026-10-30'
sourceUpdated: '2026-10-30T20:24:25Z'
source: GHSA
sourceUrl: 'https://github.com/advisories/GHSA-5xjx-3w67-w9x9'
references:
  - url: >-
      https://github.com/pypa/gh-action-pypi-publish/security/advisories/GHSA-5xjx-3w67-w9x9
  - url: 'https://github.com/advisories/GHSA-5xjx-3w67-w9x9'
tags:
  - ghsa
  - actions
ingestedAt: '2026-10-30T21:09:21.488Z'
---

## Overview

### Summary

The [pypi-publish action][pypi-publish] versions before 1.14.2 used to bundle the `emSign` root CA trust store certificate through the `certifi` distribution. It has since been removed through the bundle and the new version no longer includes them.

[pypi-publish]: https://github.com/marketplace/actions/pypi-publish

### Details

The `certifi`-provided TLS trust store is typically used by many projects in the Python ecosystem, including Sigstore that [pypi-publish] relies on for Trusted Publishing and Digital Attestations.

### Related

The external compromise is being tracked at https://emudhra.we-have-a-problem.com

## Affected packages

- `pypa/gh-action-pypi-publish <= 1.14.2`

## Remediation

Upgrade to a patched release:

- `pypa/gh-action-pypi-publish 1.14.3`