Amazee is currently experiencing a notice incident, which began 10h ago. The vendor's full update timeline is below.
Update timeline
- investigating Oct 21, 2026, 03:43 AM UTC
amazee.io is aware of an upcoming critical PHP security release that will fix two CVEs: CVE-2026-109618 and CVE-2026-109619. The release is scheduled for Wednesday, 21 October 2026 at 14:00 UTC. As soon as a patch is available, Lagoon base images will be updated and customers are encouraged to redeploy as soon as possible. For more information, see the upstream PHP announcement: https://www.php.net/archive/2026.php#2026-10-20-1 We are monitoring the situation and investigating platform-level mitigations. We will update this status page with additional information as it becomes available.
- investigating Oct 21, 2026, 10:51 AM UTC
We have enabled the virtual patch for customers using our managed NGWAF. You should still upgrade your Lagoon base images as soon as a patch is available.