Skip to content
/ Blog

Development Blog

Feature updates, product news and announcements from our team

Security maintenance: Apache HTTP Server vulnerability patched

- 2 min read

On November 11, 2026, a critical security vulnerability in Apache HTTP Server was made public: CVE-2026-119618. We checked our infrastructure and found that one of our servers was running an affected version. One day later, on November 12, that server was patched.

What the vulnerability is

Section titled “What the vulnerability is”

The issue is a race condition in the HTTP/2 module of Apache HTTP Server. Under the right conditions, a remote attacker could corrupt the server’s memory and run their own code on it, without needing to log in. It affects Apache HTTP Server versions 2.4.55 through 2.4.70 with HTTP/2 enabled, which covers a large share of web servers on the internet.

At the time of the announcement there were no known exploits or reports of attacks using it. That window is exactly when patching matters most.

What we did

Section titled “What we did”
  • Reviewed the advisory the same day it was published.
  • Checked every Claz server and found one running an affected version.
  • Upgraded Apache HTTP Server on that server to a fixed version (2.4.71 or later).
  • Verified that the site, listings, search and accounts were working normally after the update.

The update was rolled out without downtime.

What this means for you

Section titled “What this means for you”

Nothing changes on your side, and there is nothing you need to do. We have no indication that Claz was targeted or that any data was accessed. Your listings and account data are safe.

Keeping Claz secure is ongoing work, and we’ll keep applying critical fixes as quickly as we can when new issues are announced.

Hosting provider outage

- 1 min read

Update, November 9, 3:20 PM EST: We’re back online. Our hosting provider has resolved the issue and Claz is working normally again. The outage lasted from 1:45 PM to 3:20 PM EST, roughly 1.5 hours, our biggest outage in the past 10 years. Your listings and account data were not affected. Thanks for your patience, and sorry for the interruption.

November 9, 1:45 PM EST

Our hosting provider is experiencing a major outage, and Claz is currently unavailable.

Claz outage notice shown to visitors while the site was unavailable

Your listings and account are safe. We’ll be back as soon as the issue is resolved.

Our position on RSS, Atom feeds and open search

- 2 min read

RSS and Atom are established open standards for syndication on the open web. These standards have existed for a long time and served as a base for social media sites where users build individual feeds based on their interests. Unlike social media, RSS and Atom do not lock users into a specific platform: they stay open and accessible regardless of platform, media, or tool of choice.

Claz search results toolbar with the RSS button highlighted

We treat RSS and Atom feeds as part of our openness strategy. Our position on Claz is that platform content should stay available and reachable, as legitimate means for users and other platforms to stay informed and syndicate their interests. We intend to continue supporting syndication rather than building a walled garden on our platform.

At the same time, abuse is real on the open web: user-submitted content is constantly used for scams and for the unsolicited training of AI models. We use proportionate defenses to the best of our ability, and we still believe that a meaningful part of search should remain open through these standards for people, tools, and other platforms.

Category-specific attributes on Post and Edit pages: housing, vehicles, pets, and more

- 3 min read

We updated category attribute editing on Post Ad and Edit Ad pages after users asked for it.

What changed

Section titled “What changed”

The fields shown depend on the category selected. Pick Cars, Rooms for Rent, Apartments for Rent, Dogs, or another supported category, and the relevant attributes appear on post and edit pages.

Category-specific attributes on Post and Edit pages: housing, vehicles, pets, and more

Housing: bedrooms, bathrooms, square footage, furniture, pet policy, and smoking policy for rentals and homes for sale. Rooms for Rent also get bathroom (private or shared), gender preference, number of roommates, and street address.

Vehicles: year, make, model, trim, mileage, title status, condition, color, body style, engine, transmission, fuel type, and drivetrain, depending on whether the listing is a car, truck, motorcycle, or similar.

Pets: breed, age, gender, and vaccination status for dog and cat listings.

For-sale items: condition where it applies.

The same attributes are available when posting a new ad and when editing an existing one.

How it works

Section titled “How it works”

1. Choose a category. The page loads the attributes that category supports from the server: one source of truth, not hard-coded per page.

2. Fields start collapsed under Optional, so the form stays clean. Open only what you need via links like Add Year, Add Breed, or Add Pet Policy. When several fields are still empty, Add optional details reveals the rest.

3. As you type the title and description, Claz recognizes attributes in the text and fills matching fields, for example, “2018 Honda”, “45k miles”, “unfurnished”, “no pets”, or “Rottweiler puppy”. Mention a detail once; you do not have to enter it twice.

4. If you clear a field or set it yourself, the system does not overwrite your choice when the text changes. Auto-filled values update only while they came from recognition, not values you saved on purpose.

5. Save the listing. Structured attributes make the ad easier to find, filter, and trust.

Why it matters

Section titled “Why it matters”

Search works best when listings describe what buyers actually filter on. Better attribute editing on post and edit pages means fewer vague ads, fewer repeat questions in messages, and better matches across housing, vehicles, pets, and more.

The updated structure also makes it straightforward to add attributes for more categories over time, using the same pattern, driven by category.

Let us know what works

Section titled “Let us know what works”

Try the updated post or edit flow in a category you use often and tell us what still feels missing through support or the usual feedback channel.

My Listings, redesigned: manage ads at a glance

- 2 min read

For anyone who posts on Claz regularly, My Listings is where ads get paused, status gets checked, or an edit starts. That page was rebuilt to feel closer to My Favorites: visual cards instead of a dense table, especially on a phone.

My Listings, redesigned: manage ads at a glance

What we did

Section titled “What we did”

  • Card layout with photo, price, and status on each listing

  • Keyword filter to find a specific ad in a long list

  • Rich details on each card: location, category, availability, and key attributes (same idea as Favorites)

  • Quick actions on the card: start, stop, and a ⋯ menu for edit, premium, share, and delete

  • Bulk actions: stop all, start all, or delete inactive listings in one step

  • Mobile polish: cleaner layout, full-width action bar, and a bottom sheet for the ⋯ menu

Why we did it

Section titled “Why we did it”

A table works for a handful of rows. It does not scale when someone is juggling dozens of listings across categories and statuses. Feedback was clear: scanning status, finding one ad, and pausing another took too many clicks, and on mobile it was worse.

The account area should also feel consistent. My Favorites already uses cards; My Listings now matches that look.

How it works

Section titled “How it works”

1. Open My Listings from the account menu.

2. Use All / Active / Inactive / Rejected tabs, or type a keyword to filter.

3. Listings are grouped by date posted so recent ads are easy to spot.

4. Tap pause or play on a card for a single listing, or use Stop All / Start All at the top.

5. Tap ⋯ for edit, upgrade to premium, share, or delete.

The views chart still appears on the first page when traffic data is available.

Let us know what works

Section titled “Let us know what works”

Anyone managing multiple listings can try the new page and share what still feels clunky through support or the usual feedback channel.