Information for Python users regarding eMudhra / emSign CA certificate security incident

A security incident affecting eMudhra intermediate certificates has required removing the emSign root CA certificate from CA bundles such as “certifi”. Failure to do so could result in monster-in-the-middle (MITM) attacks against TLS clients. It’s important to immediately upgrade the software packages below to at least the versions specified and rebuild container images to fetch the latest system certificates. certifi 2026.10.19 (1) pip 26.2.2 uv 0.13.4 sigstore 4.5.1 (1): Advisory mentions 2...