Python issues security releases 3.15.1, 3.14.9 and 3.13.17 with an updated pip
The releases bundle pip 26.2.2, which carries refreshed certificate data after a certificate authority security incident.
The Python release team has published Python 3.15.1, 3.14.9 and 3.13.17 as security releases. Each one upgrades the bundled pip to version 26.2.2, which includes certifi 2026.10.19 to address a security incident involving the eMudhra emSign certificate authority.
Python 3.13 recently moved to security-only status and normally would not receive a pip update, but the team made a special release with installers because of the nature of the issue. The macOS installer for this release is also built with a pre-release of Tk, which addresses a possible hang in tkinter applications such as IDLE on macOS 27.0.
Developers should update their interpreters to the new versions where possible. The team also asks that pip and uv be upgraded inside all existing virtual environments, and the post includes commands for upgrading pip in a virtualenv and for updating certifi on macOS installations that cannot move to the new release yet.
Sources
Verified Oct 23, 2026 (official source). pythonsecuritydeveloper-toolspip