Security Advisory Notice: Alloy Unaffected by Reported PHP Vulnerabilities

Incident Report for Alloy

Monitoring

Alloy's products and services do not use PHP or have any PHP dependencies. Alloy has proactively reviewed all systems and confirmed we are unaffected by PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619.

AWS, Alloy's infrastructure provider, has also confirmed in their security bulletin 2026-143-AWS that its services are not impacted by these issues.

Posted Oct 22, 2026 - 12:31 EDT

Investigating

Alloy's products and services do not use PHP or have any PHP dependencies. Alloy has proactively reviewed all systems and confirmed we are unaffected by PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619.

AWS, Alloy's infrastructure provider, has also confirmed in their security bulletin 2026-143-AWS that its services are not impacted by these issues.

Posted Oct 22, 2026 - 12:30 EDT