# Information for Python users regarding eMudhra / emSign CA certificate security incident

**URL:** <https://discuss.python.org/t/information-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident/109576>\
**Category:** Announcements\
**Tags:** security\
**Created:** [October 20, 2026, 4:57pm UTC](https://discuss.python.org/t/information-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident/109576 "2026-10-20T16:57:43Z")\
**Posts on this page:** 1\
**Showing post:** 4

<div class="post-metadata">

**Author:** ![gamer191](https://sea2.discourse-cdn.com/flex002/user_avatar/discuss.python.org/gamer191/32/37145_2.png) [@gamer191](https://discuss.python.org/u/gamer191)\
**Post date:** [October 20, 2026, 7:31pm UTC](https://discuss.python.org/t/information-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident/109576/4 "2026-10-20T19:31:31Z")

</div>

Is there advice on how to securely update Pip without running an older version of Pip that’s vulnerable to MitM attacks?

---

_[View the full topic](https://discuss.python.org/t/information-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident/109576)._