PyPI/certifi: critical
certifi bundles emSign root CAs with compromised intermediate CA keys
Action: Upgrade certifi to 2026.10.18 or later.
pip install certifi==2026.10.18Affected
| introduced | fixed | last affected |
|---|---|---|
| 2019.03.09 | 2026.10.18 | - |
Fixed versions
| 2026.10.18 |
Sources
- osv: GHSA-6q48-6c7w-9gw2
- https://github.com/certifi/python-certifi/security/advisories/GHSA-6q48-6c7w-9gw2
- https://discuss.python.org/t/information-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident/109576
- https://emudhra.we-have-a-problem.com
- https://github.com/certifi/python-certifi
published · modified · JSON