Resolved on October 21, 2026, affecting Float App and API - public.
On October 21, 2026, a security vulnerability was publicly disclosed in a popular open-source software component used across the industry, including in parts of our web infrastructure. Upon disclosure, our engineering team promptly assessed the potential impact on Float's services, implemented interim protective measures, and deployed vendor-issued security updates across all affected systems. All updates were applied without service interruption. Our investigation has found no evidence that this vulnerability was exploited against Float or that any customer data was affected. We continue to monitor our environment as part of our standard security practices. No action is required from customers. If you have any questions, please contact our support team.
Affected components
Update timeline
- resolved Oct 21, 2026, 07:35 PM UTC
On October 21, 2026, a security vulnerability was publicly disclosed in a popular open-source software component used across the industry, including in parts of our web infrastructure. Upon disclosure, our engineering team promptly assessed the potential impact on Float's services, implemented interim protective measures, and deployed vendor-issued security updates across all affected systems. All updates were applied without service interruption. Our investigation has found no evidence that this vulnerability was exploited against Float or that any customer data was affected. We continue to monitor our environment as part of our standard security practices. No action is required from customers. If you have any questions, please contact our support team.
Your product runs on more than Float
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services