---
title: eMudhra Intermediate CA Compromise
authors: ['jbrown']
date: 2026-10-20T12:00:00
tags: ['technical', 'security']
summary: 'Svix response to the October, 2026 weak CA certificates issued by eMudhra'
---

Svix's information security team is aware of dangerously-weak intermediate CA certificates issued by the certification authority eMudhra, as described in [this branded security release](https://emudhra.we-have-a-problem.com/) and [this bugzilla thread](https://bugzilla.mozilla.org/show_bug.cgi?id=2083449).

The issue affects everyone on the internet, Svix included, and could be used by a network-privileged attacker to issue malicious TLS certificates and intercept traffic.

New images have been released which distrust the Root CAs which signed the affected certificates (<tt>emSign ECC Root CA - G3</tt> and <tt>Comodo AAA Services</tt>) and incorporate the latest versions of [rustls-webpki](https://github.com/rustls/webpki) to block any certificate trust chains that go through one of the affected certificates.

Cloud users are already protected. Open-source customers should upgrade to [Svix Server v1.102.1](https://github.com/svix/svix-webhooks/releases/tag/server-v1.102.1). Bridge users should upgrade to [Bridge v1.101.0](https://github.com/svix/svix-webhooks/releases/tag/bridge-v1.101.0). On-premises Svix Enterprise users using Helm should upgrade to 1.3114. Users of the Svix SDK should use their programming language's package manage to ensure that relevant dependencies are upgraded (e.g., `certifi` on Python), and should make sure that their operating systems and/or container base images have the latest `ca-certificates` packages.

If you have any questions or concerns, please don't hesitate to reach out to [support@svix.com](mailto:support@svix.com).

---

Stay tuned at [https://www.svix.com/blog](https://www.svix.com/blog) for future
posts, follow us on [Github](https://github.com/svix), [Mastodon](https://mastodon.social/@svixhq), or [RSS](https://www.svix.com/blog/rss/) for
the latest updates for the [Svix webhook service](https://www.svix.com), or
join the discussion on [our community Slack](https://www.svix.com/slack/).

Are you interested in building build highly-reliable and secure applications for server-to-server communication?
[Come work with us!](https://www.svix.com/careers/)