# Contentstack: Contentstack - Azure EU - Webhook Signature Validation Issue

- Impact (vendor’s label): minor
- Status: resolved
- Started: 2026-01-23 06:30 UTC · Resolved: 2026-01-23 06:30 UTC · Duration: 0 min
- Updates: 1
- [Vendor status page: https://stspg.io/jrlfgv6c01tq](https://stspg.io/jrlfgv6c01tq)
- [Company: Contentstack](https://rewindex.com/company/contentstack.md)

## Timeline of updates

- **resolved** 2026-01-23 06:30 UTC: A standard security upgrade to Node.js 24 with OpenSSL 3 was deployed as part of our security hardening efforts. The upgrade introduced stricter RSA-PSS signature validation per RFC 8017 standards, changing the default salt length from a previously lenient range (32-222) to strictly enforcing 32 for SHA-256. This impacted webhook functionality for configurations using RSA-based certificates with salt lengths greater than 32. Upon identifying the impact, the update was promptly reverted to restore normal operations.


---
Canonical: https://rewindex.com/company/contentstack/incidents/nd13n6lnbh98 · Markdown: https://rewindex.com/company/contentstack/incidents/nd13n6lnbh98.md · JSON: https://rewindex.com/api/v1/companies/contentstack/incidents/nd13n6lnbh98 · Generated 2026-10-20T01:30:26.342Z