cdnjs incident

SRI hashes changed on multiple libraries

Minor Resolved View vendor source →

cdnjs experienced a minor incident on August 1, 2023 affecting CDN Service (cdnjs.cloudflare.com), lasting 2d 21h. The incident has been resolved; the full update timeline is below.

Started
Aug 01, 2023, 06:22 PM UTC
Resolved
Aug 04, 2023, 03:33 PM UTC
Duration
2d 21h
Detected by Pingoru
Aug 01, 2023, 06:22 PM UTC

Affected components

CDN Service (cdnjs.cloudflare.com)

Update timeline

  1. identified Aug 01, 2023, 06:22 PM UTC

    We are aware of an issue impacting multiple libraries where SRI hashes have changed. We have found the cause of the change to the file contents/hashes and are actively working to restore the previous contents/hashes. No files on the CDN have been compromised, the contents/hashes have changed due to libraries being reprocessed with different minification logic. We are tracking this on GitHub in https://github.com/cdnjs/cdnjs/issues/14210

  2. monitoring Aug 02, 2023, 06:26 PM UTC

    A backfill has been completed that is believed to have restored files to their previous states, with the SRI hashes reverted to what they were prior to this incident. We'll continue to monitor for reports of any hash mismatches, which should be reported in the issue on GitHub at https://github.com/cdnjs/cdnjs/issues/14210

  3. resolved Aug 04, 2023, 03:33 PM UTC

    At this time we believe the fix to restore file content and SRI hashes is working as expected.