Python Security patches certifi and pip after eMudhra CA compromise

Following the compromise of the eMudhra Intermediate Certificate Authority, the Python ecosystem coordinated a rapid ecosystem-scale response to mitigate affected packages and services. Python security staff, led by the Security Developer-in-Residence, worked with maintainers to patch critical components including certifi, pip, and Python itself within two days. The incident highlighted reliance on Mozilla's CA bundle and spurred discussions around adopting certificate revocation lists for faster future mitigations. Open article →