Skip to content
Threat Feed
Subscribe

Product

Certifi (< 2026.10.18)

1 brief RSS
critical advisory

Certifi: Bundled eMudhra root CAs with compromised intermediate keys

Certifi versions before 2026.10.18 included emSign roots whose intermediate keys were compromised. An attacker able to position on path could use a fraudulent certificate to intercept TLS traffic.

certifi certificate-authority tls-interception python