PHP Vulnerability Response and mitigation
- monitoring
We are aware of the vulnerability recently announced by PHP and are actively working to mitigate the associated risk. At this time, there is no indication of any breach or compromise. As part of our mitigation efforts, we have temporarily disabled all PWA multipart requests, affecting: 1. Flow imports (ZIP/XML files) 2. All webhook requests that submit data using the multipart/form-data content type These measures are precautionary and will remain in place until the risk has been fully addressed. We will continue to monitor the situation closely and will provide further updates as soon as relevant information becomes available. Thank you for your patience and understanding.
- resolved
The PHP patch has been successfully applied. All disabled functionalities have been restored, and the service is operating as expected.