Posted by Kevin Riggle on Oct 27 The discuss.python.org conversation on that issue has long since moved on, so asking here: The macOS remediation advice on the official vuln page at https://emudhra.we-have-a-problem.com/#macos-curl lists remediation instructions which it is claimed address this, with instructions to set a PIP_CERT environment variable in a sitecustomize.py file. echo 'import os; os.environ.setdefault("PIP_CERT",...
Re: Information for Python users regarding eMudhra / emSign CA certificate security incident
About this summary. This is a short excerpt from the description that oss-security published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://seclists.org/oss-sec/2026/q4/410
Source attribution: headline and facts are from oss-security (seclists.org). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
LiteLLM Hijacked Again: Malicious 1.107.0 Wheels Steal Credentials and Load Remote Code
The JFrog Security Research team identified malicious code in `litellm` 1.107.0, a widely used Python interface and proxy for large language model providers. The payload…
Hello Python 3.15, goodbye 3.10, and now I can use 3.11
Python 3.15 is here! Here's the essential What's new in Python 3.15 guide, this year curated by 3.14 and 3.15 release manager Hugo van Kemenade. As someone who builds…
Brotli2Shell: Frequently asked questions for Google Brotli decoder vulnerability (CVE-2026-111497)
Researchers have demonstrated remote code execution through CVE-2026-111497, an out-of-bounds write in Google's Brotli decoder library, and public proofs-of-concept…
Experts temper emergency-level alarms over critical Brotli defect
Alarm bells ratcheted up yet again about an AI-discovered vulnerability that could — if exploited in the wild — destabilize vast stretches of the internet. The critical…
[oss-security][CVE-2026-115557] Distrust compromised intermediate certificates in Python ssl module
Posted by Alan Coopersmith on Oct 24 Forwarded Message Subject: [Security-announce][CVE-2026-115557] Distrust compromised intermediate certificates in ssl module Date…
Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks
Attack overview Technical details Mitigation and protection guidance Indicators of compromise References Learn More On October 21, 2026, a compromised LiteLLM 1.107.0…