uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised
GHSA-hq85-5cpj-mr62 · PYSEC-2026-4321
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
By default, uv verifies TLS connections against a vendored copy of the webpki-root-certs bundle. Versions before 0.13.4 include the emSign ECC Root CA - G3 root. Eight eMudhra intermediate CA certificates that chain to that root have compromised private keys, and the CA has revoked them.
An attacker with one of the compromised keys can issue certificates that uv accepts for any hostname, and can be used to issue certificates to enable MITM attacks.
uv 0.13.4 removes the root from its vendored bundle, following webpki-root-certs 1.0.10. Upgrade to 0.13.4 or later.
References
- WEB https://github.com/astral-sh/uv/security/advisories/GHSA-hq85-5cpj-mr62
- WEB https://github.com/certifi/python-certifi/security/advisories/GHSA-6q48-6c7w-9gw2
- WEB https://emudhra.we-have-a-problem.com
- PACKAGE https://github.com/astral-sh/uv
- WEB https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/0R3XLJL6FuE/m/0XofdebrAAAJ
Ready to move
Start Securing
Free, no credit card | First findings in minutes