{"id":"INC-aquasec-2072krwpw7c6","kind":"incident","aliases":[],"related":[],"title":"Aqua Security: Aqua Supply Chain Vulnerability Scanning Service Disruption Notice","description":"Since approximately 09:00 UTC on August 31, 2025, our Supply Chain Vulnerability Scanning service has been experiencing a degradation. This is currently causing CI/CD pipeline timeouts and timeouts on the Supply Chain page.\n\nOur team is actively investigating and has engaged the relevant internal teams to work toward resolution. We will share updates as they become available. We apologize for any inconvenience this is causing.","summary":"Aqua Security's Supply Chain Vulnerability Scanning service has been degraded since about 09:00 UTC on August 31, 2025. The degradation causes CI/CD pipeline timeouts and timeouts on the Supply Chain page, and the notice reports no security compromise.","severity":"critical","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Aqua Security","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["aqua-security","aquasec","ci-cd","incident","security","supply-chain-scanning","vendor"],"not_affected_if":["no-aqua-scanning"],"how_to_check":"- Check whether CI/CD pipelines that call Aqua's supply chain scanning time out\n- Check the Aqua Supply Chain page for timeouts","fix":null,"status":"resolved","published_at":"2026-08-31T13:00:00+00:00","first_seen_at":"2026-11-08T17:00:33+00:00","triaged_at":"2026-11-08T17:03:20+00:00","updated_at":"2026-11-08T17:03:20+00:00","category":"vendor","confidence":0.7,"triage":{"at":"2026-11-08T17:03:20Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"Aqua Security: supply chain vulnerability scanning service degraded, CI pipelines timing out","impact":"low","summary":"Aqua Security's Supply Chain Vulnerability Scanning service has been degraded since about 09:00 UTC on August 31, 2025. The degradation causes CI/CD pipeline timeouts and timeouts on the Supply Chain page, and the notice reports no security compromise.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["aqua-security","ci-cd","supply-chain-scanning"],"confidence":0.7,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Pipelines time out; no data exposure stated by the notice","analyst_note":"","how_to_check":"- Check whether CI/CD pipelines that call Aqua's supply chain scanning time out\n- Check the Aqua Supply Chain page for timeouts\n- unknown for any other check, since the sources do not say","plain_action":"","product_name":"","needs_analyst":false,"not_affected_if":["no-aqua-scanning"],"who_is_affected":"Teams whose CI/CD pipelines depend on Aqua Security's Supply Chain Vulnerability Scanning service may see pipeline timeouts. The notice describes an availability degradation, not a security flaw, and the sources do not say which customers are hit beyond that.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000725,"input_tokens":4604,"output_tokens":530,"severity_before":"critical"},"analyst_status":null,"analyst_note":null,"search":"'00':45B,74C '09':44B,73C '2025':50B,79C '2072krwpw7c6':14A '31':49B,78C 'activ':108C 'apolog':130C 'approxim':72C 'aqua':1A,3A,15A,18B,31B 'aqua-secur':17B 'aquasec':13A,20B 'august':48B,77C 'avail':128C 'becom':127C 'caus':53B,94C,136C 'cd':23B 'chain':5A,28B,35B,62B,82C,103C 'ci':22B 'ci-cd':21B 'ci/cd':54B,95C 'compromis':70B 'current':93C 'degrad':41B,52B,90C 'disrupt':9A 'engag':112C 'experienc':88C 'inc':12A 'inc-aquasec-2072krwpw7c6':11A 'incid':24B 'inconveni':133C 'intern':115C 'investig':109C 'notic':10A,66B 'page':63B,104C 'pipelin':55B,96C 'relev':114C 'report':67B 'resolut':120C 'scan':7A,29B,37B,84C 'secur':2A,19B,25B,32B,69B 'security':16A 'servic':8A,38B,85C 'share':123C 'sinc':42B,71C 'suppli':4A,27B,34B,61B,81C,102C 'supply-chain-scan':26B 'team':106C,116C 'timeout':56B,58B,97C,99C 'toward':119C 'updat':124C 'utc':46B,75C 'vendor':30B 'vulner':6A,36B,83C 'work':118C","nicknames":[],"mitigations":[],"who_affected":"Teams whose CI/CD pipelines depend on Aqua Security's Supply Chain Vulnerability Scanning service may see pipeline timeouts. The notice describes an availability degradation, not a security flaw, and the sources do not say which customers are hit beyond that.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":["aquasecurity","security"],"ptokens":["aqua","security"],"labels":["aquasec","aquasecurity","cicd","critical","incident","security","supplychainscanning","vendor"],"campaign_type":null,"search_a":"'2072krwpw7c6':14A 'aqua':1A,3A,15A 'aquasec':13A 'chain':5A 'disrupt':9A 'inc':12A 'inc-aquasec-2072krwpw7c6':11A 'notic':10A 'scan':7A 'secur':2A 'security':16A 'servic':8A 'suppli':4A 'vulner':6A","search_b":"'00':45B '09':44B '2025':50B '31':49B 'aqua':18B,31B 'aqua-secur':17B 'aquasec':20B 'august':48B 'caus':53B 'cd':23B 'chain':28B,35B,62B 'ci':22B 'ci-cd':21B 'ci/cd':54B 'compromis':70B 'degrad':41B,52B 'incid':24B 'notic':66B 'page':63B 'pipelin':55B 'report':67B 'scan':29B,37B 'secur':19B,25B,32B,69B 'servic':38B 'sinc':42B 'suppli':27B,34B,61B 'supply-chain-scan':26B 'timeout':56B,58B 'utc':46B 'vendor':30B 'vulner':36B","search_c":"'00':74C '09':73C '2025':79C '31':78C 'activ':108C 'apolog':130C 'approxim':72C 'august':77C 'avail':128C 'becom':127C 'caus':94C,136C 'chain':82C,103C 'ci/cd':95C 'current':93C 'degrad':90C 'engag':112C 'experienc':88C 'inconveni':133C 'intern':115C 'investig':109C 'page':104C 'pipelin':96C 'relev':114C 'resolut':120C 'scan':84C 'servic':85C 'share':123C 'sinc':71C 'suppli':81C,102C 'team':106C,116C 'timeout':97C,99C 'toward':119C 'updat':124C 'utc':75C 'vulner':83C 'work':118C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-08-31T13:00:00+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"statuspage","external_id":"aquasec:2072krwpw7c6","url":"https://stspg.io/nh7xnbynl016","severity":"critical","published_at":"2026-08-31T13:00:00+00:00","modified_at":"2026-08-31T17:16:15+00:00","first_seen_at":"2026-11-08T17:00:33+00:00","fetched_at":"2026-11-09T00:50:37+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}