Security updates in progress for third-party software components

What to do

• Check whether your product depends on Zapier. Check your stack

  Paste a package.json, lockfile, Terraform or a list of domains at down.guide/stack to see every provider you depend on.

• Confirm your retries, queues and scheduled jobs caught up after the 4d 19h it lasted.

  Anything that failed between 2026-10-22 15:29 UTC and 2026-10-27 10:56 UTC may need a replay.

• Subscribe to Zapier's feed to hear about the next one first. RSS feed

  https://down.guide/feed?provider=zapier works in Slack (/feed subscribe), Discord feed bots and any RSS reader.

Updates from Zapier 4

1. investigatingOct 22, 2026, 3:29 PM UTC

   We're applying security updates to the Node.js runtime used by parts of Zapier, following a security release from the Node.js project. We have not identified any customer impact or evidence of exploitation, and no action is needed on your part. Some updates are rolling out now, so you may see brief latency to workflows while they complete.

   provider

2. investigatingOct 22, 2026, 7:21 PM UTC

   We’re continuing to roll out the security updates and are monitoring the deployment closely. We have not identified any customer impact or evidence of exploitation. You may continue to see brief workflow latency while updates complete. We'll continue to keep you up to date as we make progress

   provider

3. identifiedOct 23, 2026, 5:33 PM UTC

   _We've made good progress rolling out the security updates and are continuing to work through the remaining components while monitoring closely. We have not identified any customer impact or evidence of exploitation._ _We'll continue to keep you up to date as we make progress._

   provider

4. resolvedOct 27, 2026, 10:56 AM UTC

   We have not identified any customer impact or evidence of exploitation. We have completed the priority security updates and mitigations, and are closing this incident. Remaining lower-risk updates, including updates managed by our providers, will continue as follow-up work. No action is needed on your part.

   provider

Corrections

None so far.

Something wrong on this page? Report an error or send us a note. Every fix is listed here.