No impact incident
Cloudinary: Notice regarding recently-reported Ruby regular expression vulnerabilities (CVE-2026-89078, CVE-2026-93577, CVE-2026-97229, CVE-2026-110264)
Oct 24, 2026, 07:03 UTC
started
07:03 UTC
resolved
<1 min
duration
Current status of Cloudinary: Operational — live Cloudinary status
Timeline
- Oct 24, 2026, 07:03 UTCresolvedOn October 23, 2026, the Ruby project released security fixes for vulnerabilities in its regular expression engine (CVE-2026-89078, CVE-2026-93577, CVE-2026-97229, CVE-2026-110264). Cloudinary upgraded its core platform, including its upload, transformation, and delivery APIs and Console, to the patched Ruby version on the same day. Our review found no evidence of exploitation and no impact on customers or customer data. No action is required on your part for the Cloudinary platform. Customers who use Ruby in their own applications, including with the Cloudinary Ruby SDK, should update Ruby in their environments to a patched release (3.3.13, 3.4.12, 4.0.9 or later).
Updates as published by Cloudinary (original).
Other services with incidents at the same time
- Render 07:11 UTC · Platform emails not being sent
- Twilio 07:05 UTC · SMS Delivery Delays from Twilio to WOM Colombia
- Oracle NetSuite Service 07:00 UTC · _system_metadata:eyJ1cHRpbWUiOiI5OS45OSIsInJlcXVlc3RzX3NlcnZlZCI6NjgzMjgzMjYzNjQwfQo=
- Paysafe 06:21 UTC · Service Disruption - QR Code Partner
More Cloudinary incidents
- October 21, 2026 Notice regarding recently-reported PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619
- October 16, 2026 Issues accessing the Cloudinary web UI
- October 5, 2026 Usage reports unavailable in Console Dashboard
- September 28, 2026 Increased Error Rates – EU Region
- July 12, 2026 Elevated Error Rates for Requests Using g_auto
- June 7, 2026 DAM View Assets Error