uv 0.13.4 Ships Updated Bundled CAs After eMudhra Incident — Most Open Source Is Affected
charliermarsh · x · 2026-10-21
uv 0.13.4 updates its bundled CA certificates in response to the eMudhra incident. According to the author, this is a huge deal and not unique to uv: bundled CAs in certifi, webpki-root-certs and similar libraries mean much of open source is affected. Anything that bundles CA certs should be upgraded.
Related event: eMudhra certificate incident hits open source; uv and pip rush CA updates(2 posts)→
More from Safety
- Stanford's Noah Goodman shares interactive AI safety concept map — stanfordnlp · 2026-10-21
- AI agents are overwhelming Gmail's spam filter, researcher warns — LuizaJarovsky · 2026-10-21
- AI safety researcher Sören Mindermann moves to Tsinghua, co-founds Beijing AI Safety Hub — dhadfieldmenell · 2026-10-21
- Talos researcher: AI agent attacks today are loud pentests — quiet swarms are the real threat — matthew_d_green · 2026-10-21
- Congressman hires an AI Policy Fellow, possibly Congress's only dedicated AI staffer — ShakeelHashim · 2026-10-21
- Security experts warn AI-armed attackers are doubling breach activity even as vuln counts explode — philvenables · 2026-10-21