PyPI/certifi: unknown

certifi bundles emSign root CAs with compromised intermediate CA keys

Action: Upgrade certifi to 2026.10.19 or later.

pip install certifi==2026.10.19

Affected

Fixed versions

Sources

• osv: PYSEC-2026-4320
• https://github.com/certifi/python-certifi/security/advisories/GHSA-6q48-6c7w-9gw2
• https://discuss.python.org/t/information-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident/109576
• https://emudhra.we-have-a-problem.com
• https://github.com/certifi/python-certifi
• https://pypi.org/project/certifi
• https://github.com/advisories/GHSA-6q48-6c7w-9gw2

published 2026-10-20T21:41:50.722083Z · modified 2026-10-20T22:00:02.600723204Z · JSON