Private keys for eight eMudhra intermediate CA certificates linked to roots trusted by Mozilla, Microsoft, Apple and Chrome were compromised. Trust stores must be updated; fixed certificate lists are available in uv 0.13.4, pip 26.2.2 and certifi 2026.10.19.