Security updates in progress for third-party software components

Summary

Security updates in progress for third-party software components

We have not identified any customer impact or evidence of exploitation. We have completed the priority security updates and mitigations, and are closing this incident. Remaining lower-risk updates, including updates managed by our providers, will continue as follow-up work. No action is needed on your part.

• Started

  Oct 22, 2026 · 3:29 PM

• Resolved

  Oct 27, 2026 · 10:56 AM

• Duration

  4d 19h 27m

• Severity

  None

• ◐

  Investigating

  Oct 22 · 3:29 PM Zapier

  We're applying security updates to the Node.js runtime used by parts of Zapier, following a security release from the Node.js project. We have not identified any customer impact or evidence of exploitation, and no action is needed on your part. Some updates are rolling out now, so you may see brief latency to workflows while they complete.

• ◐

  Investigating

  Oct 22 · 7:21 PM Zapier

  We’re continuing to roll out the security updates and are monitoring the deployment closely. We have not identified any customer impact or evidence of exploitation. You may continue to see brief workflow latency while updates complete. We'll continue to keep you up to date as we make progress

• ◆

  Identified

  Oct 23 · 5:33 PM Zapier

  _We've made good progress rolling out the security updates and are continuing to work through the remaining components while monitoring closely. We have not identified any customer impact or evidence of exploitation._ _We'll continue to keep you up to date as we make progress._

• ✓

  Resolved

  Oct 27 · 10:56 AM Zapier

  We have not identified any customer impact or evidence of exploitation. We have completed the priority security updates and mitigations, and are closing this incident. Remaining lower-risk updates, including updates managed by our providers, will continue as follow-up work. No action is needed on your part.