Ongoing since 07:17 PM UTC.
At Tiger Data, protecting the security and reliability of Tiger Cloud is a top priority. Like many of you, we have been closely monitoring the recent wave of security disclosures, including critical vulnerabilities in PHP, Node.js, and Next.js, as well as software supply-chain attacks affecting npm, Python packages, and other open-source ecosystems. These incidents reinforce the importance of proactive security practices across our entire infrastructure. As part of these ongoing efforts, we have evaluated the recently disclosed PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619). We can confirm that Tiger Cloud does not run PHP and is not affected by these vulnerabilities. No customer action is required. Our approach to security extends well beyond responding to individual vulnerabilities. We proactively assess dependencies, monitor emerging security threats, and work to protect our software supply chain and build infrastructure. Across both our control plane and data plane, we emphasize least-privilege access, isolation, and containment to reduce potential attack surfaces and limit the impact of any security incident. In light of the recent disclosures, we are also conducting a thorough internal security review of our platform and infrastructure, despite finding no evidence of exposure to the affected software. We believe that regularly examining and strengthening our security posture is essential, even when no direct vulnerability has been identified. Tiger Cloud continues to operate normally. We will continue monitoring developments closely and communicate promptly if we identify security issues that may affect our customers. We encourage customers to reference our status page for relevant updates regarding platform security and availability.
Update timeline
- investigating Oct 23, 2026, 07:17 PM UTC
At Tiger Data, protecting the security and reliability of Tiger Cloud is a top priority. Like many of you, we have been closely monitoring the recent wave of security disclosures, including critical vulnerabilities in PHP, Node.js, and Next.js, as well as software supply-chain attacks affecting npm, Python packages, and other open-source ecosystems. These incidents reinforce the importance of proactive security practices across our entire infrastructure. As part of these ongoing efforts, we have evaluated the recently disclosed PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619). We can confirm that Tiger Cloud does not run PHP and is not affected by these vulnerabilities. No customer action is required. Our approach to security extends well beyond responding to individual vulnerabilities. We proactively assess dependencies, monitor emerging security threats, and work to protect our software supply chain and build infrastructure. Across both our control plane and data plane, we emphasize least-privilege access, isolation, and containment to reduce potential attack surfaces and limit the impact of any security incident. In light of the recent disclosures, we are also conducting a thorough internal security review of our platform and infrastructure, despite finding no evidence of exposure to the affected software. We believe that regularly examining and strengthening our security posture is essential, even when no direct vulnerability has been identified. Tiger Cloud continues to operate normally. We will continue monitoring developments closely and communicate promptly if we identify security issues that may affect our customers. We encourage customers to reference our status page for relevant updates regarding platform security and availability.
Your product runs on more than TigerData
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services