GHSA-hq85-5cpj-mr62

Summary

uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised

Severity

critical

CWE

CWE-295

Published

2026-10-20

Updated

2026-10-20

Advisory details

By default, uv verifies TLS connections against a vendored copy of the webpki-root-certs bundle. Versions before 0.13.4 include the emSign ECC Root CA - G3 root. Eight eMudhra intermediate CA certificates that chain to that root have compromised private keys, and the CA has revoked them.

An attacker with one of the compromised keys can issue certificates that uv accepts for any hostname, and can be used to issue certificates to enable MITM attacks.

uv 0.13.4 removes the root from its vendored bundle, following webpki-root-certs 1.0.10. Upgrade to 0.13.4 or later.

References

• https://github.com/advisories/GHSA-hq85-5cpj-mr62
• https://github.com/astral-sh/uv/security/advisories/GHSA-hq85-5cpj-mr62
• https://github.com/certifi/python-certifi/security/advisories/GHSA-6q48-6c7w-9gw2
• https://emudhra.we-have-a-problem.com
• https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/0R3XLJL6FuE/m/0XofdebrAAAJ

Related advisories

• CVE-2026-104843 — medium · PyPI/uv
• GHSA-4gg8-gxpx-9rph — medium · crates.io/uv
• CVE-2025-13327 — medium · crates.io/uv
• CVE-2025-54368 — medium · PyPI/uv
• GHSA-6q48-6c7w-9gw2 — critical · PyPI/certifi
• CVE-2026-105794 — critical · NuGet/Microsoft.Native.Quic.MsQuic.OpenSSL
• CVE-2026-63374 — critical · PyPI/anyio
• CVE-2026-46428 — critical · crates.io/lettre

Is your project exposed to this? Stateward checks every dependency on every pull request and flags it only if your code actually reaches it.

Summarize with AI

ChatGPTClaudePerplexity