Found 380+ eMudhra-Linked Root Certificates on My Laptop | Rix Data

An author found that hundreds of eMudhra-linked root and intermediate certificates with easily crackable private keys are bundled across various developer tools, CLIs, and applications on their macOS laptop. By scanning 9 million files, the author identified 382 affected files and confirmed that several tested apps accept leaf certificates signed with a recovered intermediate key. While current releases of most bundles are fixed, outdated and vendored copies remain vulnerable. Open article →