# Contentful: Meltdown & Spectre vulnerabilities update

> Contentful status incident “Meltdown & Spectre vulnerabilities update” on 2018-01-05: impact none (vendor’s label), 0 min, 1 update(s). Archived by Rewindex.

Canonical: https://rewindex.com/company/contentful/incidents/y9tw2ywj434g
Last updated: 2018-01-05T15:33:00Z

- Impact (vendor’s label): none
- Status: resolved
- Started: 2018-01-05 15:33 UTC · Resolved: 2018-01-05 15:33 UTC · Duration: 0 min
- Updates: 1
- [Vendor status page: https://www.contentfulstatus.com/incidents/y9tw2ywj434g](https://www.contentfulstatus.com/incidents/y9tw2ywj434g)
- [Company: Contentful](https://rewindex.com/company/contentful.md)

## Timeline of updates

- **resolved** 2018-01-05 15:33 UTC: This week two serious vulnerabilities were disclosed that affect many modern CPUs \[1\]. This update is meant to give a security status assessment updated with all information we have collected on this incident, as of Friday the 5th of January 15:30 UTC. Contentful's server platform is hosted on virtual machines in the Amazon Web Services cloud. We use the "hardware virtualization" option exclusively, which is not vulnerable to Meltdown. In any case AWS have, through a series of actions in the last few days, patched their systems to protect malicious users from leveraging Meltdown gaining access to information from other customers hosted on the same cloud service \[2\]. Attacks based on Meltdown and Spectre require local access to execute code. Currently Contentful does not provide any option to run custom code so no third-party code can be run on our servers, therefore we believe the risk is mitigated through our existing security practices. In any event, we will install the operating system patches to protect against Meltdown and Spectre which are due to be released in the next few days. \[1\]: https://meltdownattack.com/ \[2\]: https://aws.amazon.com/security/security-bulletins/AWS-2018-013/

_From the vendor’s published history: only the final update text is available for incidents before Rewindex began polling this page._

## Cite this

Status incident (vendor impact label: none) posted by Contentful, started 2018-01-05 15:33 UTC, resolved after 0 min, 1 update(s).

- Canonical URL: https://rewindex.com/company/contentful/incidents/y9tw2ywj434g
- Citation: Contentful, “Meltdown & Spectre vulnerabilities update” (2018-01-05 15:33 UTC). Archived by Rewindex: https://rewindex.com/company/contentful/incidents/y9tw2ywj434g (CC BY 4.0).
- Markdown link: `[Contentful: Meltdown & Spectre vulnerabilities update (2018-01-05)](https://rewindex.com/company/contentful/incidents/y9tw2ywj434g)`


---
Canonical: https://rewindex.com/company/contentful/incidents/y9tw2ywj434g · Markdown: https://rewindex.com/company/contentful/incidents/y9tw2ywj434g.md · JSON: https://rewindex.com/api/v1/companies/contentful/incidents/y9tw2ywj434g · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-04T16:47:29.451Z