certifi

Reported Context (3)

certifi 2026.10.19 or later Update each application environment that uses its CA bundle. Python and CI/CD Users Urged to Update After emSign CA Incident
Go added explicit blocking, Mozilla updated NSS, Python’s certifi certificate bundle removed the affected root, and the Rust webpki-roots ecosystem issued an update. Go Blocks Compromised eMudhra Certificate Authorities in CVE-2026-111943
to them. Many other programs that check TLS certificates, from Go binaries to anything using Python's certifi bundle, do not check revocation data and keep trusting a chain until their code or their root bundle Eight eMudhra Certificate Authority Keys Compromised; Browsers and Software Block Certificates

CVE (1)

People (3)

MITRE ATT&CK (1)

Vendors (7)

Products (14)

Tools (1)

Industries (1)

Countries (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.