Resolved
The upstream security fix has been applied to all our services and all temporary restrictions are lifted. File uploads work normally again.
Monitoring
File uploads in the guest app work again. The public API and the operator platform were not affected. We keep this incident in monitoring while the upstream security fix is rolled out to the remaining services and will resolve it once that is complete.
Identified
Update: the impact is narrower than first announced. Uploading an image in a guest form, and sending files through the public API, remain unavailable while we roll out a security update. Operator platform features are not affected. We will post here when uploads are restored.
Identified
As a precaution while we roll out a security update to our platform, we are temporarily rejecting file uploads. Uploading files in the operator platform, uploading documents in the guest app and sending files through the public API will fail. Everything else works as normal. We will restore uploads step by step over the coming days as the update lands, and will post here when they are back.