Vulnerability Information

A critical vulnerability was announced for the Google Brotli decoder, which is used in many web applications over the world.

In short, it is described as:

“[…] allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.”

See the linked CVE entry for more information.

Our development and operations teams have been working hard to ensure that all our systems are secured from any potential exploitation. Please rest assured that your data is safe, and our main services remain fully operational and unaffected.

Key Information:

• Services are fully functional with no impact on core operations. Updates of the Brotli library have been performed in all active instances.
• Our security and engineering teams are actively monitoring all systems and have not seen any signs of compromise.