Podio incident

PHP Vulnerability Response and mitigation

Ongoing since 02:32 PM UTC, affecting Advanced Workflow Automation and Advanced Workflow Automation Failover Queue.

monitoring Oct 21, 2026, 02:32 PM UTC

We are aware of the vulnerability recently announced by PHP and are actively working to mitigate the associated risk. At this time, there is no indication of any breach or compromise. As part of our mitigation efforts, we have temporarily disabled all PWA multipart requests, affecting: 1. Flow imports (ZIP/XML files) 2. All webhook requests that submit data using the multipart/form-data content type These measures are precautionary and will remain in place until the risk has been fully addressed. We will continue to monitor the situation closely and will provide further updates as soon as relevant information becomes available. Thank you for your patience and understanding.

Started
Oct 21, 2026, 02:32 PM UTC
Resolved
Ongoing
Duration
● 15h 38m
Detected by Pingoru
Oct 21, 2026, 02:32 PM UTC

Affected components

Advanced Workflow AutomationAdvanced Workflow Automation Failover Queue

Update timeline

  1. monitoring Oct 21, 2026, 02:32 PM UTC

    We are aware of the vulnerability recently announced by PHP and are actively working to mitigate the associated risk. At this time, there is no indication of any breach or compromise. As part of our mitigation efforts, we have temporarily disabled all PWA multipart requests, affecting: 1. Flow imports (ZIP/XML files) 2. All webhook requests that submit data using the multipart/form-data content type These measures are precautionary and will remain in place until the risk has been fully addressed. We will continue to monitor the situation closely and will provide further updates as soon as relevant information becomes available. Thank you for your patience and understanding.

Your product runs on more than Podio

Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.

Add your stack →