monday.com to start disabling unpatched apps after security fix deadline passes
monday.com says the deadline to submit a fix for the Node.js security incident is end of day on October 28. From the next day it will start disabling all apps that were not patched.
monday.com said several emails went out on October 28 as part of the security incident follow-up.
In the morning, it sent another batch of emails to users who fixed their app, titled security_incident_nodejs_access_restored. The email for non-monday developers was also sent, including a link to the fix form.
A reminder went out at about 14:30 Israel time to developers who did not fix their app. monday.com said that anyone who received this reminder, even after submitting the form, has not been seen to have fixed the app.
Developers with questions about the fix for a specific app should contact Support@monday.com.
Source: monday.com in the monday developers community Slack