pip 26.2.2 Upgrades certifi Dependency in Response to the Same eMudhra CA Incident
charliermarsh · x · 2026-10-21
pip 26.2.2 has been released, upgrading its certifi dependency for the same reason as uv's update — the eMudhra certificate incident. The author urges users to upgrade pip as well.
Related event: eMudhra certificate incident hits open source; uv and pip rush CA updates(2 posts)→
More from Safety
- Stanford's Noah Goodman shares interactive AI safety concept map — stanfordnlp · 2026-10-21
- AI agents are overwhelming Gmail's spam filter, researcher warns — LuizaJarovsky · 2026-10-21
- AI safety researcher Sören Mindermann moves to Tsinghua, co-founds Beijing AI Safety Hub — dhadfieldmenell · 2026-10-21
- Talos researcher: AI agent attacks today are loud pentests — quiet swarms are the real threat — matthew_d_green · 2026-10-21
- Congressman hires an AI Policy Fellow, possibly Congress's only dedicated AI staffer — ShakeelHashim · 2026-10-21
- Security experts warn AI-armed attackers are doubling breach activity even as vuln counts explode — philvenables · 2026-10-21