webpki-roots

Reported Context (2)

Go added explicit blocking, Mozilla updated NSS, Python’s certifi certificate bundle removed the affected root, and the Rust webpki-roots ecosystem issued an update. Go Blocks Compromised eMudhra Certificate Authorities in CVE-2026-111943
Three of the fixes work by removing roots rather than blocking the keys. certifi, webpki-roots, and Homebrew's ca-certificates drop emSign ECC Root CA - G3 from their bundles, and Homebrew also drops Sectigo's AAA Eight eMudhra Certificate Authority Keys Compromised; Browsers and Software Block Certificates

CVE (1)

People (3)

Vendors (7)

Products (6)

Industries (1)

Countries (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.