wayback-machine-archiver 4.1.1

v4.1.1: CRITICAL Certifi & urllib3 Security Fixes

on Python PyPI

Release Notes:

Updates certifi to 2026.10.19 and urllib3 to 2.8.0. Fixes a compromised root CA in certifi and three urllib3 CVEs. No breaking changes.

Security Fixes

• certifi: compromised eMudhra intermediates — certifi before 2026.10.18 bundled the emSign ECC Root CA - G3 root. Eight eMudhra intermediate CAs chaining to it had compromised keys, and the CA revoked them. 2026.10.19 removes that root. Advisory: GHSA-6q48-6c7w-9gw2 (critical; no CVE assigned).
• urllib3 2.8.0: three CVEs — CVE-2026-97687 (HTTPS proxy TLS config may be ignored), CVE-2026-97688 (chunked deflate infinite loop), CVE-2026-97689 (unbounded chunk-size line buffered in memory).

If certifi or urllib3 are already installed, pip keeps them, so run pip install -U certifi urllib3. Rebuild container images that vendor certifi.