Quick Base incident
[Quickbase Status] Notice: Node.js Vulnerability (Informational)
Resolved on October 27, 2026, affecting Quickbase Audit Logs - EU Region and Quickbase Service - EU Region and 1 more.
Regarding the recently reported Node.js vulnerability, tracked as CVE-2026-111497 (dubbed "Node2Shell" or "Broccoli2Shell"), affected versions of Node.js, the .NET runtime and the Google Brotli library are present in parts of Quickbase's infrastructure. One internet-facing supporting service was found to have a path to the vulnerable code. A fix for it has been developed and is being deployed as a priority. The core Quickbase platform cannot be exploited in its current production configuration. Components where the vulnerable code cannot be reached are also being updated to patched versions, in line with our standard vulnerability management practices. The investigation is ongoing, and new findings are triaged and escalated for remediation as soon as they are identified. Quickbase is not aware of any exploitation of this vulnerability, and no customer action is required.
Affected components
Update timeline
- investigating Oct 27, 2026, 07:00 PM UTC
Regarding the recently reported Node.js vulnerability, tracked as CVE-2026-111497 (dubbed "Node2Shell" or "Broccoli2Shell"), affected versions of Node.js, the .NET runtime and the Google Brotli library are present in parts of Quickbase's infrastructure. One internet-facing supporting service was found to have a path to the vulnerable code. A fix for it has been developed and is being deployed as a priority. The core Quickbase platform cannot be exploited in its current production configuration. Components where the vulnerable code cannot be reached are also being updated to patched versions, in line with our standard vulnerability management practices. The investigation is ongoing, and new findings are triaged and escalated for remediation as soon as they are identified. Quickbase is not aware of any exploitation of this vulnerability, and no customer action is required.
Your product runs on more than Quick Base
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services