GitHub Advisoryadvisory · GitHub Actions

GHSA-5xjx-3w67-w9x9 pypi-publish action revocation of CA in the chain that Sigstore uses in Trusted Publishing and Digital Attestations for PyPI

CRITICAL Published 2026-10-30 Modified 2026-10-30 Official page ↗
Ecosystem
GitHub Actions
Packages
pypa/gh-action-pypi-publish
Severity
Critical
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Weaknesses
CWE-295
Reviewed
2026-10-30

Affected packages

• GitHub Actions pypa/gh-action-pypi-publish: < 1.14.3 → fixed in 1.14.3

Description

Summary The [pypi-publish action][pypi-publish] versions before 1.14.2 used to bundle the `emSign` root CA trust store certificate through the `certifi` distribution. It has since been removed through the bundle and the new version no longer includes them. [pypi-publish]: https://github.com/marketplace/actions/pypi-publish Details The `certifi`-provided TLS trust store is typically used by many projects in the Python ecosystem, including Sigstore that [pypi-publish] relies on for Trusted Publishing and Digital Attestations. Related The external compromise is being tracked at https://emudhra.we-have-a-problem.com

Related

Weakness · CWE (1)

  • CWE-295 Improper Certificate Validation weakness

References