eMudhra certificate incident hits open source; uv and pip rush CA updates

The eMudhra certificate incident has rippled through the Python ecosystem: uv 0.13.4 updated its bundled CA certificates and pip 26.2.2 bumped its certifi dependency. Astral's Charlie Marsh stressed the issue affects the whole certifi-dependent ecosystem and urged users to upgrade both tools.

2026-10-21 ~ 2026-10-21 · 2 related posts

• uv 0.13.4 Ships Updated Bundled CAs After eMudhra Incident — Most Open Source Is Affected — charliermarsh · 2026-10-21
• pip 26.2.2 Upgrades certifi Dependency in Response to the Same eMudhra CA Incident — charliermarsh · 2026-10-21