diff --git a/certifi-2021.10.8.tar.gz b/certifi-2021.10.8.tar.gz
deleted file mode 100644
index 9e1581b..0000000
Binary files a/certifi-2021.10.8.tar.gz and /dev/null differ
diff --git a/certifi-2023.7.22.tar.gz b/certifi-2023.7.22.tar.gz
new file mode 100644
index 0000000..7f62db5
Binary files /dev/null and b/certifi-2023.7.22.tar.gz differ
diff --git a/python-certifi.spec b/python-certifi.spec
index 7149065..af39aed 100644
--- a/python-certifi.spec
+++ b/python-certifi.spec
@@ -1,11 +1,11 @@
 %global _empty_manifest_terminate_build 0
 Name:           python-certifi
-Version:        2021.10.8
+Version:        2023.7.22
 Release:        1
 Summary:        Python package for providing Mozilla's CA Bundle.
 License:        MPL-2.0
 URL:            https://certifiio.readthedocs.io/en/latest/
-Source0:        https://files.pythonhosted.org/packages/6c/ae/d26450834f0acc9e3d1f74508da6df1551ceab6c2ce0766a593362d6d57f/certifi-2021.10.8.tar.gz
+Source0:        https://files.pythonhosted.org/packages/source/c/certifi/certifi-%{version}.tar.gz
 BuildArch:      noarch
 %description
 Certifi provides Mozilla carefully curated collection of Root Certificates for validating the
@@ -35,7 +35,7 @@ trustworthiness of SSL certificates while verifying the identity of TLS hosts. I
 extracted from the Requests project.
 
 %prep
-%autosetup -n certifi-2021.10.8
+%autosetup -n certifi-%{version} -p1
 
 %build
 %py3_build
@@ -78,6 +78,9 @@ mv %{buildroot}/doclist.lst .
 %{_docdir}/*
 
 %changelog
+* Mon Jul 31 2023 yaoxin <yao_xin001@hoperun.com> - 2023.7.22-1
+- Update to 2023.7.22 for fix CVE-2023-37920 and CVE-2022-23491
+
 * Wed Jan 19 2022 SimpleUpdate Robot <tc@openeuler.org> - 2021.10.8-1
 - Upgrade to version 2021.10.8