diff --git a/.changeset/emudhra-certifi.yml b/.changeset/emudhra-certifi.yml
new file mode 100644
index 0000000..ea4988a
--- /dev/null
+++ b/.changeset/emudhra-certifi.yml
@@ -0,0 +1,4 @@
+type: patch
+packages: [http]
+changelog: |-
+  Require certifi>=2026.10.19 to use the corrected CA bundle for the October 2026 eMudhra intermediate CA compromise. Applications that override Requests' CA bundle must update their custom trust store separately.
diff --git a/packages/http/pyproject.toml b/packages/http/pyproject.toml
index 03a8d6e..e131af3 100644
--- a/packages/http/pyproject.toml
+++ b/packages/http/pyproject.toml
@@ -25,6 +25,7 @@ classifiers = [
 ]
 dependencies = [
     "requests>=2.31.0",
+    "certifi>=2026.10.19",
     "turnkey-api-key-stamper",
     "turnkey-sdk-types",
 ]