PHP versions across all fleet and managed servers have now been updated to versions that patch the announced CVEs.
Managed WordPress (Onyx) is in progress, and we will update you in due course.
The Brotli RCE (CVE-2026-111497) has been mitigated fleet-wide, and on all customer servers that are managed by our team.
We will continue to work on the remaining CVEs, applying mitigations where available and awaiting fixed versions from upstream.
Thank you for your patience and cooperation.
·