The company first announced what it called “Cloudflare service issues” in an 08:56 UTC Friday update on its status page, saying that it was investigating issues with the Cloudflare Dashboard and related APIs and that customers using the Dashboard/Cloudflare APIs may see requests fail and/or errors be displayed.
At 09:12 UTC, Cloudflare said it had implemented a fix and was monitoring the results.
At 09:20 UTC, the firm said it had resolved the incident.
“A change made to how Cloudflare’s Web Application Firewall parses requests caused Cloudflare’s network to be unavailable for several minutes this morning,” the company said in its 09:20 UTC update. “This was not an attack; the change was deployed by our team to help mitigate the industry-wide vulnerability disclosed this week in React Server Components. We will share more information as we have it today.”
React, a library for web and native user interfaces, said in a Wednesday (Dec. 3) blog post that a security vulnerability in React Server Components had been reported and that the company recommended that users upgrade to a fixed version immediately.
Advertisement: Scroll to Continue
Cloudflare’s global cloud platform delivers network services to businesses around the world and is designed to make those businesses more secure while enhancing the performance and reliability of their internet properties, according to the company’s website.
The Cloudflare service issues caused the websites for several banks, Shopify, Zoom, LinkedIn, and the Norwegian and Swedish governments to go down, Bloomberg reported Friday.
CNBC reported Friday that sites affected by the issues included Coinbase, Substack, Shopify, HSBC and Deliveroo. Cloudflare’s software helps to manage and secure traffic for 20% of the web.
Data from outage-tracking tool Downdetector showed that the number of reports about issues with Cloudflare peaked at about 2,000 during the incident, Reuters reported Friday.
Cloudflare experienced and resolved another outage on Nov. 18. That issue shut down multiple high-profile websites, including ChatGPT, other artificial intelligence services and social platform X.
Cloudflare Chief Technology Officer Dane Knecht said after that incident, in a Nov. 18 post on X, “The trust our customers place in us is what we value the most, and we are going to do what it takes to earn that back.”
