Astronomer incident
PHP Security Advisory: Astro and Astro Private Cloud Not Affected; Review Custom Images
Ongoing since 06:26 PM UTC.
**PHP Vulnerabilities (CVE-2026-109618 and CVE-2026-109619) ** Astronomer has conducted a thorough internal review of its code and container images and confirmed that Astro and Astro Private Cloud do not include PHP and are therefore not affected by the recently disclosed PHP vulnerabilities. **Customer action:** Customers should review their own code and any modifications they have made to Astronomer-provided runtime images (for example, custom-installed packages or system dependencies) to determine whether PHP is present and whether they may be impacted. Please follow the guidance in the[ NCSC advisory](https://www.ncsc.gov.uk/news/critical-security-issue-affecting-php) and the PHP project’s security update to remediate any affected components.
Update timeline
- monitoring Oct 22, 2026, 06:26 PM UTC
**PHP Vulnerabilities (CVE-2026-109618 and CVE-2026-109619) ** Astronomer has conducted a thorough internal review of its code and container images and confirmed that Astro and Astro Private Cloud do not include PHP and are therefore not affected by the recently disclosed PHP vulnerabilities. **Customer action:** Customers should review their own code and any modifications they have made to Astronomer-provided runtime images (for example, custom-installed packages or system dependencies) to determine whether PHP is present and whether they may be impacted. Please follow the guidance in the[ NCSC advisory](https://www.ncsc.gov.uk/news/critical-security-issue-affecting-php) and the PHP project’s security update to remediate any affected components.
Your product runs on more than Astronomer
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services