{
  "meta": {
    "version": "v1",
    "pricing": {
      "public": {
        "label": "Public",
        "description": "Read-only API access for lightweight status checks and public integrations."
      },
      "premium": {
        "label": "Premium",
        "description": "API keys with higher hourly quotas, plus Slack, Teams, Discord, webhook, and email outage alerts across your vendor stack."
      }
    },
    "generatedAt": "2026-10-22T03:53:28.783Z"
  },
  "data": {
    "id": "incident_statuspage_astronomer_01M5GEKQW2J6J9QTP7185NK365",
    "slug": "astronomer-security-update-runtime-releases-and-guidance-for-the-emudhra-emsign-2026-10-22-185nk365",
    "title": "Security Update: Runtime Releases and Guidance for the eMudhra/emSign Certificate Issue",
    "summary": "Security Update: Runtime Releases and Guidance for the eMudhra/emSign Certificate Issue",
    "status": "identified",
    "stale": false,
    "severity": "minor",
    "startedAt": "2026-10-22T00:01:42+00:00",
    "updatedAt": "2026-10-22T00:01:42+00:00",
    "resolvedAt": null,
    "provider": {
      "slug": "astronomer",
      "name": "Astronomer"
    },
    "affectedServices": [],
    "links": {
      "html": "/incidents/astronomer-security-update-runtime-releases-and-guidance-for-the-emudhra-emsign-2026-10-22-185nk365",
      "api": "/api/v1/incidents/astronomer-security-update-runtime-releases-and-guidance-for-the-emudhra-emsign-2026-10-22-185nk365",
      "providerHtml": "/providers/astronomer",
      "alerts": "https://outagedeck.com/account?stack=astronomer&utm_source=api&utm_medium=response&utm_campaign=api_alerts&utm_content=incident"
    },
    "impactSummary": "Astronomer reported this event with no impact level.",
    "source": {
      "id": "source_astronomer_status",
      "kind": "official_api",
      "name": "Astro Status",
      "checkedAt": "2026-10-22T03:50:10.989+00:00",
      "stale": false,
      "officialUrl": "https://status.astronomer.io/",
      "statusPageUrl": "https://status.astronomer.io/"
    },
    "updates": [
      {
        "id": "update_statuspage_astronomer_01M5GEKQW2J6J9QTP7185NK365_01M5GEKQW2RD3YK2Z5QRHBC5EY",
        "status": "identified",
        "body": "Astronomer has released Runtime updates to address a publicly disclosed security vulnerability concerning private keys associated with eight eMudhra/emSign intermediate certificate authority (CA) certificates.\n\nFor additional background, visit <https://emudhra.we-have-a-problem.com/>.\n\n**Scope and available updates**\n\nThis advisory stems from an issue with a third-party certificate authority. Action required for customer-managed components depends on their specific certificate trust stores and verification mechanisms.\n\nThe following Runtime releases incorporate certificate trust updates to mitigate this vulnerability:\n\n• **Runtime 13:** 13.12.1\n\n• **Runtime 3.0:** 3.0-20\n\n• **Runtime 3.1:** 3.1-23\n\n• **Runtime 3.2:** 3.2-12\n\n• **Runtime 3.3:** 3.3-10\n\nFor full details, please refer to the [Runtime release feed](https://www.astronomer.io/docs/runtime/runtime-release-feed).\n\n**Recommended customer actions**\n\n• Upgrade to the appropriate updated Runtime release for your environment.\n\n• Rebuild and redeploy custom images using the updated base image. Refer to our [mitigation guide](https://www.astronomer.io/docs/runtime/mitigate-emudhra-ca-compromise) for step-by-step instructions.\n\n• Audit customer-managed build pipelines and tooling, applying relevant vendor updates to certificate trust stores and signature verification components.\n\n• Ensure TLS and code-signature verification remain enabled. If updates cause validation failures, contact the endpoint owner or software publisher for replacement certificate or artifact guidance.\n\nPlease note that Runtime updates address the trust components included within those specific releases. Customer-added dependencies, custom certificate bundles, and external tooling may require separate updates.\n\n**Support and further guidance**\n\nIf you are unable to upgrade or require assistance determining the applicable next steps, please contact [**support@astronomer.io**](mailto:support@astronomer.io). Include your deployment model, Runtime version, and whether you maintain custom images or build pipelines.\n\nAdditional mitigation guidance is currently being finalized. We will update this advisory as further details and Remote Execution releases are confirmed.",
        "createdAt": "2026-10-22T00:01:42+00:00"
      }
    ],
    "access": {
      "plan": "public",
      "keyed": false
    }
  }
}