Qlty Software incident
Security advisory: eMudhra certificate authority compromise
Resolved after 11 hours 37 minutes, on October 21, 2026.
We are responding to the recently disclosed eMudhra certificate authority compromise: https://emudhra.we-have-a-problem.com/. An attacker able to intercept network traffic could impersonate trusted services to software that still accepts the affected certificates. We have released initial mitigations for our hosted analysis infrastructure. We are continuing to review and remediate Qlty services, build environments, the CLI, and its bundled tooling, including installation and upgrade paths. Customers using Qlty CLI or self-hosted CI should apply available operating-system security updates. Some developer tools maintain separate certificate bundles, so an operating-system or browser update alone may not provide complete protection. Keep certificate verification enabled. We will publish confirmed fixed Qlty versions, tested upgrade instructions, and any required runtime or cache refresh steps as they become available. We will update this notice as remediation progresses.
Update timeline
- investigating Oct 21, 2026, 04:27 AM UTC
We are responding to the recently disclosed eMudhra certificate authority compromise: https://emudhra.we-have-a-problem.com/. An attacker able to intercept network traffic could impersonate trusted services to software that still accepts the affected certificates. We have released initial mitigations for our hosted analysis infrastructure. We are continuing to review and remediate Qlty services, build environments, the CLI, and its bundled tooling, including installation and upgrade paths. Customers using Qlty CLI or self-hosted CI should apply available operating-system security updates. Some developer tools maintain separate certificate bundles, so an operating-system or browser update alone may not provide complete protection. Keep certificate verification enabled. We will publish confirmed fixed Qlty versions, tested upgrade instructions, and any required runtime or cache refresh steps as they become available. We will update this notice as remediation progresses.
- resolved Oct 21, 2026, 04:05 PM UTC
This incident has been resolved.
Your product runs on more than Qlty Software
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services