Python ssl module denylists compromised intermediates (CVE-2026-115557)
The notice says the denylist should protect users even when those certificates are not yet removed elsewhere.
50
Vendor
Python
- Mentions · 7d0
- Mentions · 30d2
- All mentions3
- First seenSep 11, 2026
- Last mentioned8d ago
Timeline
3 articles · newest firstcertifi 2026.10.19 removes the emSign root in a critical update
Python's security list rates GHSA-6q48-6c7w-9gw2 critical; the forwarded note says certifi 2026.10.19 drops the emSign root.
78
Soft-deprecating re.match()
Python 3.15 soft-deprecates re.match(), introducing the clearer alternative re.prefixmatch()
15
Related CVEs
by mentions- Python ssl does not reject known compromised certificates
Appears with
- re.match()product · 1
- sslproduct · 1
- Simon Willisonorganization · 1
- re.prefixmatch()product · 1
- certifiproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.