Greenhouse: Trust page changed

Trust / securityChanged (not classified) (rule)Changed 2026-11-03 08:45 UTCtrust.greenhouse.com

Summary

Greenhouse added a response to the Node2Shell vulnerability (CVE-2026-111497), stating it remediated exposed applications and applied a web application firewall (WAF) rule to block exploitation attempts. It reported no evidence of exploitation and ongoing monitoring, giving customers an update on its security response.

Machine-written from the diff below (Sol; type: other). Check the diff before relying on it.

What changed

~~Struck in red~~ is what Greenhouse removed; blue is what they added. Muted text is unchanged context.

Added#1

…policy Announcements ‹date› , ‹date› Response to the nothing here working with relevant third-party vendors to confirm they…

…policy Announcements ‹date› , ‹date› Response to the Node2Shell vulnerability (CVE-2026-111497) We assessed our product infrastructure, remediated applications exposed to this vulnerability, and applied a web application firewall (WAF) rule to block exploitation attempts. We found no evidence of exploitation. We maintain monitoring across our environment, and we are working with relevant third-party vendors to confirm they…

Compared with the previous archived version (#9608 to #13773). Text is normalized before comparing: dates, counters and tokens show as ‹date›, ‹count›, ‹tok›, and noise-only edits are hidden. Rewindex shows changed passages with a few words of context, not a copy of the page. View the live page (opens in new tab).

Archive proof

Rewindex commits each page capture it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves these records existed by then and have not been changed since, by anyone, Rewindex included.

How the archive is checked, and what it cannot prove.

Oct 28
Before captured 08:45 UTC
In the 2026-10-28 checkpoint, timestamped by FreeTSA and DigiCert on Oct 29, 00:43 UTC. Record hash dbdc93bbc78a55ae…
Download proof
Nov 3
After captured 08:45 UTC
In the 2026-11-03 checkpoint, timestamped by FreeTSA and DigiCert on Nov 4, 00:42 UTC. Record hash 332b682811a2e862…
Download proof

History of this page

YesterdayTuesday, November 3Tue, Nov 3

1 page change

Content changed
08:45Page change
Trust pagechangedthis change
Greenhouse added a response to the Node2Shell vulnerability (CVE-2026-111497), stating it remediated exposed applications and applied a web application firewall (WAF) rule to block exploitation attempts. It reported no evidence of exploitation and ongoing monitoring, giving customers an update on its security response.

Wednesday, October 28

1 page change

Content changed
08:45Page change
Trust pagechanged
Greenhouse added Sublime Security to its subprocessor list, with processing in the United States for a corporate email security solution. The listed subprocessor count increased from 30 to 31, updating customers’ visibility into vendors used by Greenhouse.

Friday, October 23

1 page change

Content changed
08:45Page change
Trust pagechanged
Greenhouse added a trust-page response to the PHP2Shell vulnerability (CVE-2026-109618 / CVE-2026-109619), reporting no exposure in its product infrastructure. It says it added precautionary detection and protective measures and is working with relevant third-party vendors to confirm they are assessing and mitigating their own exposure.

Cite this

Trust page changed on Greenhouse’s Trust page, changed 2026-11-03 08:45 UTC (change 3 of 3).

Title: Trust page changed
Vendor: Greenhouse
Date: 2026-11-03 08:45 UTC
URL: https://rewindex.com/change/p13773

All Greenhouse changes Greenhouse profile Markdown JSON