[kaggle-marvin]

certifi before 2026.10.19 trusts the emSign ECC Root CA - G3, whose intermediate CAs have compromised private keys (GHSA-6q48-6c7w-9gw2). Python TLS clients don't check revocation, so anything using the old bundle accepts certificates minted with those keys, for any host.

The notebook image doesn't pin certifi; it inherits whatever the Colab base image ships. This adds floors to kaggle_requirements.txt, so the next build is guaranteed to be patched:

• certifi>=2026.10.19
• pip>=26.2.2: older pip always loads its own vendored certifi, even when the system one is fixed (python.org notice).

tests/test_certifi.py checks the versions and that the emSign ECC G3 root is gone from the bundle.

Not covered here: the gcloud SDK's bundled certifi (b/575852372).

Bug: http://b/575927270

[kaggle-marvin]

Closing at the maintainer's request; the fix will land through a PR from a Kaggle/docker-python branch instead.