rewindex

ChangesMixpanelTrust page

Mixpanel: Trust page changed

Trust / securityChanged (not classified) (rule)Changed trust.mixpanel.com (opens in new tab)
Summary

Mixpanel expanded its security update from “Google Brotli compression” to “Google Brotli/Node.js vulnerabilities,” adding CVE-2026-105482, CVE-2026-105483, CVE-2026-106069, CVE-2026-105481, CVE-2026-106072 and CVE-2026-106074 alongside CVE-2026-111497 (Brotli). The disclosure now covers more vulnerabilities, but the diff provides no new customer-impact or remediation details.

Machine-written from the diff below (Sol; type: other). Check the diff before relying on it.

What changed

Struck in red is what Mixpanel removed; blue is what they added. Muted text is unchanged context.

Changed#1
Before: …remediation. Updates View all Security Security update: Google Brotli compression and LiteLLM compromise Published ‹date› Last updated: ‹date›…
After: …remediation. Updates View all Security Security update: Google Brotli/Node.js vulnerabilities and LiteLLM compromise Published ‹date› Last updated: ‹date›…
Changed#2
Before: …will update it as our investigations progress. Google Brotli compression Publicly disclosed: ‹date› Shortly after the following vulnerabilities…
After: …will update it as our investigations progress. Google Brotli/Node.js vulnerabilities Publicly disclosed: ‹date› Shortly after the following vulnerabilities…
Added#3
Before: …Brotli/Node.js vulnerabilities Publicly disclosed: ‹date› Shortly after the nothing here were disclosed, our internal teams promptly reviewed exposure.…
After: …Brotli/Node.js vulnerabilities Publicly disclosed: ‹date› Shortly after the following vulnerabilities were disclosed, our internal teams promptly reviewed exposure.…
Removed#4
Before: …disclosed: ‹date› Shortly after the vulnerability affecting the Brotli compression algorithm (CVE-2026-111497) was disclosed, our internal teams promptly reviewed exposure.…
After: …disclosed: ‹date› Shortly after the vulnerability affecting the removed was disclosed, our internal teams promptly reviewed exposure.…
Added#5
Before: …were disclosed, our internal teams promptly reviewed exposure. nothing here Based on our assessment, all endpoints have been…
After: …were disclosed, our internal teams promptly reviewed exposure. CVE-2026-111497 (Brotli) CVE-2026-105482 CVE-2026-105483 CVE-2026-106069 CVE-2026-105481 CVE-2026-106072 CVE-2026-106074 Based on our assessment, all endpoints have been…
Changed#6
Before: …Read more Read more about Security update: Google Brotli compression and LiteLLM compromise Security Security update: eMudhra CA…
After: …Read more Read more about Security update: Google Brotli/Node.js vulnerabilities and LiteLLM compromise Security Security update: eMudhra CA…

Compared with the previous archived version (#10524 to #17091). Text is normalized before comparing: dates, counters and tokens show as ‹date›, ‹count›, ‹tok›, and noise-only edits are hidden. Rewindex shows changed passages with a few words of context, not a copy of the page. View the live page (opens in new tab).

Archive proof

Rewindex commits each page capture it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves these records existed by then and have not been changed since, by anyone, Rewindex included.

How the archive is checked, and what it cannot prove.

History of this page

Saturday, November 7

1 page change

Thursday, October 29

1 page change

Cite this

Trust page changed on Mixpanel’s Trust page, changed 2026-11-07 08:58 UTC (change 2 of 2).

Title
Trust page changed
Vendor
Mixpanel
Date
URL
https://rewindex.com/change/p17091

All Mixpanel changesMixpanel profileMarkdownJSON