---
id: "GHSA-5xjx-3w67-w9x9"
kind: "vulnerability"
aliases: ["GHSA-5xjx-3w67-w9x9"]
title: "pypi-publish action revocation of CA in the chain that Sigstore uses in Trusted Publishing and Digital Attestations for PyPI"
severity: "critical"
cvss: null
epss: null
exploited: false
status: "open"
category: "package"
products: [{"name": "pypa/gh-action-pypi-publish", "fixed": ["1.14.3"], "affected": "<= 1.14.2", "ecosystem": "github-actions"}]
ecosystems: ["github-actions"]
tags: ["cwe-295", "github-actions", "package", "pypi", "python", "sigstore", "trusted-publishing"]
not_affected_if: ["no-pypi-publish-action", "pinned-1.14.3-or-later"]
published_at: "2026-10-30T20:24:24+00:00"
first_seen_at: "2026-10-30T20:28:41+00:00"
updated_at: "2026-10-30T20:30:22+00:00"
sources: [{"source": "ghsa", "url": "https://github.com/advisories/GHSA-5xjx-3w67-w9x9", "first_seen_at": "2026-10-30T20:28:41+00:00"}]
---

# pypi-publish action revocation of CA in the chain that Sigstore uses in Trusted Publishing and Digital Attestations for PyPI

Versions of the pypi-publish GitHub Action before 1.14.2 bundled the emSign root CA certificate through the certifi package, and that CA is part of the chain Sigstore uses for Trusted Publishing and attestations. The advisory describes the risk as revocation of that CA, so trust in releases signed through that chain could be affected.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- github-actions:pypa/gh-action-pypi-publish affected <= 1.14.2 fixed 1.14.3

## How to check

- Check the action version in your workflows: look for `pypa/gh-action-pypi-publish` pinned below `1.14.2`.
- Search workflow files under `.github/workflows/` for `gh-action-pypi-publish`.

## Fix

- `pypa/gh-action-pypi-publish` `1.14.3` (affected versions are `<= 1.14.2`).

## Timeline

- 2026-10-30T20:28:41+00:00 ghsa https://github.com/advisories/GHSA-5xjx-3w67-w9x9

## Documents

- [advisory] Maintainer's advisory: api.github.com https://api.github.com/repos/pypa/gh-action-pypi-publish/security-advisories/GHSA-5xjx-3w67-w9x9
- [advisory] Maintainer's advisory: github.com https://github.com/pypa/gh-action-pypi-publish/security/advisories/GHSA-5xjx-3w67-w9x9

## From the sources

### Summary

The [pypi-publish action][pypi-publish] versions before 1.14.2 used to bundle the `emSign` root CA trust store certificate through the `certifi` distribution. It has since been removed through the bundle and the new version no longer includes them.

[pypi-publish]: https://github.com/marketplace/actions/pypi-publish

### Details

The `certifi`-provided TLS trust store is typically used by many projects in the Python ecosystem, including Sigstore that [pypi-publish] relies on for Trusted Publishing and Digital Attestations.

### Related

The external compromise is being tracked at https://emudhra.we-have-a-problem.com

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_