Mozilla::CA versions before 20261020 for Perl include a CA certificate bundle that contains a root certificate linked to compromised intermediate certificates. This bundle includes the "emSign ECC Root CA - G3" root, which enables trust paths for intermediate certificates whose private keys have been publicly exposed. Attackers who can intercept or redirect client traffic may exploit these compromised keys to impersonate TLS servers. Perl clients using LWP, HTTP::Tiny, and IO::Socket::SSL may be affected depending on their CA certificate store configuration. Users should verify which CA store their client uses and apply operating system vendor updates if relying on the system store.