The company published the account on October 22, 2026.
According to Weaviate, the end-to-end patching process took less than 17 hours. It said Enterprise customers were patched within six hours. The work involved core development, console, platform and agents teams, plus product support.
Weaviate said the teams rolled almost every byte of its environment to Go 1.27.3, created and reviewed pull requests, pushed tags, monitored promotions, and watched service tests. The post does not say that the leaked certificates were used to compromise Weaviate or its customers, identify affected components, or provide independent verification of the reported timelines.