Alloy incident
Security Advisory Notice: Alloy Unaffected by Reported PHP Vulnerabilities
Ongoing since 04:30 PM UTC.
Alloy's products and services do not use PHP or have any PHP dependencies. Alloy has proactively reviewed all systems and confirmed we are unaffected by PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. AWS, Alloy's infrastructure provider, has also confirmed in their security bulletin 2026-143-AWS that its services are not impacted by these issues.
Update timeline
- investigating Oct 22, 2026, 04:30 PM UTC
Alloy's products and services do not use PHP or have any PHP dependencies. Alloy has proactively reviewed all systems and confirmed we are unaffected by PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. AWS, Alloy's infrastructure provider, has also confirmed in their security bulletin 2026-143-AWS that its services are not impacted by these issues.
- monitoring Oct 22, 2026, 04:31 PM UTC
Alloy's products and services do not use PHP or have any PHP dependencies. Alloy has proactively reviewed all systems and confirmed we are unaffected by PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. AWS, Alloy's infrastructure provider, has also confirmed in their security bulletin 2026-143-AWS that its services are not impacted by these issues.
Your product runs on more than Alloy
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services