Body parsing change for a React Server Components fix causes 25-minute outage
Dec 5, 08:47 UTCDec 5, 09:12 UTC
Duration
25m
Impact
Major
Root cause
Config change
Cloudflare, 90 days
56 incidents
Affected
CDNWAFGlobal
Lesson: Urgent security mitigations still need a staged rollout; speed of response is exactly when a global config push is most dangerous.
What happened
Configuration changes to body parsing logic, made to detect and mitigate an industry-wide React Server Components vulnerability, caused a portion of the network to fail for about 25 minutes. Not an attack.
More from Cloudflare
Full history| Started | Incident | Impact | Duration |
|---|---|---|---|
| Sep 2500:03 UTC | Issues with Durable Objects | minor | Ongoing |
| Sep 2420:40 UTC | Intermittent 500 errors for backend services on Replicate | minor | 1h 54m |
| Sep 2417:33 UTC | Delays Starting Cloudflare Workers Builds | minor | 3h 19m |
| Sep 2417:26 UTC | Browser isolation session data sync issues | minor | 5h 11m |
| Sep 2415:20 UTC | Cloudflare Access updates delayed | minor | 3h 5m |
| Sep 2410:22 UTC | Customers using BYOIP can have issues updating their BGP prefixes, including advertising or withdrawing prefixes. | minor | 3m |
Also caused by configuration change
All| Started | Vendor | Incident | Impact | Duration |
|---|---|---|---|---|
| Sep 2423:36 UTC | Key Value service restarts | minor | 0m | |
| Sep 2414:08 UTC | The Salesforce integration is unavailable for some customers | none | 7h 18m | |
| Sep 2218:20 UTC | Phone Number APIs and Console Were Returning Incorrect 404 Responses | none | 0m | |
| Sep 1211:04 UTC | Some customers experiencing blurry image previews and download issues | minor | 8h 56m | |
| Sep 1107:18 UTC | INC20000213 | critical | 6h 1m | |
| Sep 407:34 UTC | INC20000199 | critical | 2h 36m |
Sources: vendors' own status pages, published postmortems and SEC 8-K Item 1.05 filings, read daily. Times as reported. Logos via logo.dev; trademarks belong to their owners.