VULNRABLE / Vulnerability / GHSA-6q48-6c7w-9gw2
GHSA-6q48-6c7w-9gw2
CRITICAL WATCH certifi GHSA
Exploit verdict: CVSS 9.5 · no EPSS data
CVSS Score
9.5
Severity
CRITICAL
EPSS
—
Source
GHSA
Summary
certifi bundles emSign root CAs with compromised intermediate CA keys
What this means
GHSA-6q48-6c7w-9gw2 is a critical-severity vulnerability affecting certifi, rated CVSS 9.5. Published October 20, 2026.
View full advisory at GHSA →