# Cloudsmith: Policies with upstream tags are not blocking packages when Block Until Scanned is enabled. 

- Impact (vendor’s label): minor
- Status: resolved
- Started: 2026-09-14 16:13 UTC · Resolved: 2026-09-14 18:30 UTC · Duration: 2.3 h
- Updates: 4
- Vendor status page: n/a
- [Company: Cloudsmith](https://rewindex.com/company/cloudsmith.md)

## Timeline of updates

- **investigating** 2026-09-14 16:13 UTC: Policies that use upstream tags fail to evaluate correctly and block packages when Block Until Scanned is enabled. A fix is being implemented for this.
- **identified** 2026-09-14 16:59 UTC: The issue has been identified, and steps have been taken to mitigate it. We continue to work on a permanent fix.
- **identified** 2026-09-14 17:22 UTC: We have triggered a re-evaluation, and all impacted packages have been successfully quarantined. The issue is mitigated, and we continue to work on a permanent fix.
- **resolved** 2026-09-14 18:30 UTC: The root cause was identified and the issue is now resolved.


---
Canonical: https://rewindex.com/company/cloudsmith/incidents/01M2GB40PQ2H68FCTBTGH0DZQQ · Markdown: https://rewindex.com/company/cloudsmith/incidents/01M2GB40PQ2H68FCTBTGH0DZQQ.md · JSON: https://rewindex.com/api/v1/companies/cloudsmith/incidents/01M2GB40PQ2H68FCTBTGH0DZQQ · Generated 2026-10-18T09:40:52.674Z
