I just ran a check across / on my mac and found 43 #emudhra vulnerable vendored bundles. That's: - 30 (!) bundles from different versions of certifi across the 8 different versions of python and in the various venvs - Apple provided /Library/Perl/5.34/Mozilla/CA/cacert.pem - aws-cli vendored botocore - Zoom's vendored bundle - a homebrew "portable-ruby" version - as well as a few other commercial vendors So yay. This is going to linger everywhere for a very long time to come.