👋 Recently we had a user disclose a security incident on this Slack - this is our best recap of what happened and what we are doing in response: https://airbyte.com/blog/improving-security-for-open-source-airbyte-users If you are running Airbyte unsecured, or versions v0.35 and below, we strongly recommend securing your Airbyte instance and regularly upgrading your Airbyte instance. Airbyte Cloud customers were not affected. Thank you and we stand by to respond to followup questions and improve our docs to help you be confident in your Airbyte deployments.

Thanks for the blog. We have deployed airbyte on GKE and added IAP authentication with SSL. Web URL is accessible without a VPN. Are there security risks?

cc @Charles Giardina (Airbyte) @Sherif Nada

Thanks, @swyx (Airbyte), for the quick response. Yes, we are using the latest version, and SSL is enabled with authentication

yeah sounds good. i can never say anything is 100% secure but that’s as good as we recommend right now