Following the eMudhra debacle, many package managers (anything relying on certify) issued an update. You should update your pip, uv, certify, etc., ASAP. Right now, ideally. https://discuss.python.org/t/information-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident/109576
discuss.python.orgInformation for Python users regarding eMudhra / emSign CA certificate security incidentA security incident affecting eMudhra intermediate certificates has required removing the emSign root CA certificate from CA bundles such as “certifi”. It’s important to immediately upgrade the software packages below to at least the versions specified and rebuild container images with layer caching disabled to fetch the latest system certificates. Failure to do so could result in monster-in-the-middle (MITM) attacks against TLS clients, including python.org and pypi.org . certifi 2026.10.19 (..
0 reposts6 likes