We're aware of several security vulnerabilities announced today by Node.js, affecting the 22.x, 24.x and 26.x release lines.

We're reviewing the impact on our services and will apply the patched versions across our servers as soon as our vendors release them.

We'll update this notice as more information becomes available.

We're currently performing emergency maintenance across our fleet to make sure your sites are protected against two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619. Keeping your account secure is of the utmost importance to us, so we're updating PHP on every server as fixes become available.

As part of this work, we're retiring PHP 4.4, 5.1 and 5.2 with immediate effect. These versions stopped receiving security fixes many years ago and cannot be protected against these issues. If your site uses PHP 4.4, 5.1 or 5.2, it may display errors or stop working. We will do everything we can to prevent this, but ensuring the security of our customers' sites takes priority. We will contact you if you are using one of the versions of PHP that are being retired.

Thanks for your patience while we keep things safe.