Python's ssl module has been updated to include a denylist of known compromised intermediate certificates. This enhancement ensures that such certificates are automatically rejected regardless of the SSLContext policy configuration, improving user security even when certificate revocation is not configured. The vulnerability affects multiple Python versions prior to their respective fixed releases.