Unverified50% confidenceEventExact time
After learning of the vulnerability, Mozilla took three days to update its certificate trust list (NSS), and this list is relied upon by a large number of open-source projects such as curl and Python.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/21/2026
First Seen
Valid until: 1/19/2027
Sources
Related Entities
Related Claims
UnverifiedNSS is the Network Security Services library maintained by Mozilla, which contains the root certificate trust list shared by the browser and many open-source software programs, and tools such as curl and Python directly rely on NSS's trust store.73% similarUnverifiedDependency locking mechanisms in software supply chain security (such as npm's package-lock.json and Python's requirements.txt hash locking) alert against silent updates by fixing dependency versions and integrity fingerprints.61% similarUnverifiedOpenCode confirmed via its official X account that it suffered a security intrusion, with user credentials leaked.60% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1083001API
curl https://kongchang.com/api/v1/knowledge/claims/1083001MCP
get_claim(id=1083001)