Package
graalvm-25-graalpy
Component
pip
Latest update
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Impact
Fixed in pip >=26.2.0, but every pip release at or above that version vendors urllib3 2.7.0, which hard-requires ssl.VERIFY_X509_PARTIAL_CHAIN at import time. GraalVM 25.0.4.1's bundled ssl module doesn't have that attribute (added to GraalPy mainline 2026-07-08, not yet in this release), so the import silently fails and leaves urllib3's SSLContext unset, breaking pip's own network calls with TypeError: Can't create an SSLContext object without an ssl module. Confirmed by reproducing the identical failure attempting the bump -- no pip or urllib3 release avoids this.
Status