Qlty Software is currently experiencing a major incident, which began 12h ago. The vendor's full update timeline is below.
Update timeline
- investigating Oct 21, 2026, 04:27 AM UTC
Status: Investigating We are responding to the recently disclosed eMudhra certificate authority compromise: https://emudhra.we-have-a-problem.com/. An attacker able to intercept network traffic could impersonate trusted services to software that still accepts the affected certificates. We have released initial mitigations for our hosted analysis infrastructure. We are continuing to review and remediate Qlty services, build environments, the CLI, and its bundled tooling, including installation and upgrade paths. Customers using Qlty CLI or self-hosted CI should apply available operating-system security updates. Some developer tools maintain separate certificate bundles, so an operating-system or browser update alone may not provide complete protection. Keep certificate verification enabled. We will publish confirmed fixed Qlty versions, tested upgrade instructions, and any required runtime or cache refresh steps as they become available. We will update this notice as remediation progresses.