Geocodio incident

PHP security vulnerabilities

Geocodio is currently experiencing a major incident, which began 6h ago. The vendor's full update timeline is below.

Started
Oct 21, 2026, 09:14 AM UTC
Resolved
Ongoing
Duration
● 6h 2m
Detected by Pingoru
Oct 21, 2026, 09:14 AM UTC

Update timeline

  1. monitoring Oct 21, 2026, 09:14 AM UTC

    Status: Monitoring Geocodio runs on PHP, and PHP has announced two critical security vulnerabilities. We have seen no sign of exploitation, and all services are running normally. Patches are expected today at 14:00 UTC (10AM US Eastern). We will deploy the patch as soon as it's available. To protect customer data, there is a chance we may temporarily pause spreadsheet uploads in the dashboard and through the Lists API until the patch is in place. Geocoding API requests will not be affected. We'll update this page if we pause uploads.