Skip to content
OpenAdvisories

Package · PyPI

certifi

4 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical —

    certifi bundles emSign root CAs with compromised intermediate CA keys

    Certifi versions before 2026.10.18 include the `emSign ECC Root CA - G3` root certificate in their bundled CA store. Eight eMudhra intermediate CA certificates that chain to this root have compromised private keys and the CA has revoked them. An attacker with…