{"type":"post","id":"workers-builds-and-pages-build-images-reject-compromised-134fd7","slug":"workers-builds-and-pages-build-images-reject-compromised-134fd7","title":"Workers Builds and Pages build images reject compromised eMudhra certificates","description":"Cloudflare says Workers Builds and Pages build images now reject certificates chaining to eight compromised eMudhra intermediate authorities.","retrieval_nugget":"Cloudflare says Workers Builds and Pages build images now reject certificates chaining to eight compromised eMudhra intermediate authorities. The change covers repository cloning, dependency installation and HTTPS requests during builds, while customers with pinned older runtimes or custom certificate bundles may still need to check their configuration.","published_at":"2026-11-06","updated_at":"2026-11-06","record_date":"2026-11-06","date_kind":"published_at","topics":["security","developer-tools"],"entities":["Cloudflare","Workers Builds","Cloudflare Pages","eMudhra","Bun","Node.js","pip"],"related_patterns":["agent-security-moves-to-runtime-boundaries"],"novelty_label":"new_fact","what_changed":"Cloudflare now rejects compromised eMudhra certificates in Workers Builds and Pages build images, with updated CA bundles and runtime versions.","prior_refs":[],"source_url":"https://developers.cloudflare.com/changelog/post/2026-10-23-build-images-emudhra-certificates","source_urls":["https://developers.cloudflare.com/changelog/post/2026-10-23-build-images-emudhra-certificates"],"schema_version":"newruntime-agent-readable-v0.2","stable_id":"post:workers-builds-and-pages-build-images-reject-compromised-134fd7","status":"published","visuals":[],"editor":{"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]},"routes":{"html":"https://newruntime.com/posts/workers-builds-and-pages-build-images-reject-compromised-134fd7/","markdown":"https://newruntime.com/posts/workers-builds-and-pages-build-images-reject-compromised-134fd7.md","json":"https://newruntime.com/posts/workers-builds-and-pages-build-images-reject-compromised-134fd7.json"},"markdown_url":"https://newruntime.com/posts/workers-builds-and-pages-build-images-reject-compromised-134fd7.md","next_reads":[{"type":"topic","path":"/topics/security/","url":"https://newruntime.com/topics/security/","title":"Security","reason":"Explore the security topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/security.md","json_url":"https://newruntime.com/topics/security.json"},{"type":"topic","path":"/topics/developer-tools/","url":"https://newruntime.com/topics/developer-tools/","title":"Developer Tools","reason":"Explore the developer-tools topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/developer-tools.md","json_url":"https://newruntime.com/topics/developer-tools.json"},{"type":"collection","path":"/posts/","url":"https://newruntime.com/posts/","title":"Field Notes","reason":"Open the latest editorial analysis.","media_type":"text/html","json_url":"https://newruntime.com/posts.json"},{"type":"collection","path":"/sources/","url":"https://newruntime.com/sources/","title":"Sources","reason":"See the original sources this archive cites.","media_type":"text/html"}]}