Back to overview
Resolved

PHP vulnerability is being mitigated, and patched

Oct 21, 2026 at 3:58pm UTC
Affected services
ap-northeast-2
ap-northeast-1
eu-central-1
eu-central-2
eu-central-3
eu-central-4
eu-central-5
eu-west-1
sa-east-1 (South America)
us-east-6
snipeitapp.com
demo.snipeitapp.com
develop.snipeitapp.com

Resolved
Oct 21, 2026 at 5:06pm UTC

The newly-patched versions of PHP have been rolled out to the entire fleet.

Updated
Oct 21, 2026 at 4:17pm UTC

We have now implemented all the mitigations for our hosted fleet, and are starting the upgrade process with the patched version now.

Created
Oct 21, 2026 at 3:58pm UTC

Two PHP vulnerabilities were announced today. We've already rolled out partial mitigations for them, and are in the process of rolling out another mitigation. And, in parallel, we are trying to fetch the upgraded packages, but the mirror network is under severe load.