Ray patches eMudhra CA compromise
The Ray-2.59.1 release addresses the October 2026 compromise of eMudhra intermediate CA keys by upgrading pip, uv, and certifi versions. Security fixes were applied to Docker images, virtualenvs, and wheel builds to ensure CA bundles are no longer vulnerable.
- Field
- computer security
- What they did
- Ray released version 2.59.1 to patch a security vulnerability caused by the compromise of eMudhra intermediate CA keys on October 20, 2026.
- Why it matters
- The update replaces the compromised certificate bundles in pip, virtualenv, and other Ray components to prevent unauthorized access to user data.
#security#pip#certifi#emudhra#ca-certificates#docker



