PHP Vulnerability Responses by Company

Apryse

Global cloud / infrastructure
Aliases / services
Apryse / Apryse Software Inc. / PDFTron / Xodo Sign / Eversign / PDFlib / TET / iText / LEADTOOLS / Scanbot / PrizmDoc / apryse.com
Official website
https://apryse.com

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Listed services and systems

Response status
Xodo Sign patched; SDK scope varies
Response information checked
2026-10-27 Rechecked: 2026-10-27

PDF, document processing and e-signature products.

Xodo Sign PHP services were updated to 8.4.27/8.2.35. Major SDKs including WebViewer and Server SDK do not use PHP. PDFlib/TET PHP extensions rely on customer PHP updates. Licensing and commerce systems remain under review.

What users should do

No Xodo Sign update is required. Update the runtime used for PDFlib/TET PHP integrations and follow notices on licensing and commerce systems.

Official service URL

Source URLs

  1. PHP2Shell response and scopehttps://support.apryse.com/support/solutions/articles/35000327403Response evidence
  2. Operating entityhttps://apryse.com/privacyService and operation documentation
Related official sources
  1. PHP2Shell response and scopeOfficial notice
  2. Operating entityOfficial information directory

Comments